Masquerade detection using enriched command lines
A prototype real-time intrusion-detection expert system