System Event Monitoring for Active Authentication
Jeffery Payne, Mark Fenner, Jonathan Kauffman · IT Professional · 2013
The authors use system event monitoring to distinguish between the behavioral characteristics of normal and anomalous computer system users. Identifying anomalous behavior at the system event level diminishes privacy concerns and supports the identification of cross-application behavioral patterns.