Extrusion detection : security monitoring for internal intrusions - Bejtlich, Richard (Addison-Wesley, 2005)