Detecting insider threats by monitoring system call activity
A data mining framework for building intrusion detection models