An efficient way to monitor security is to model user behavior using time series data and watching for anomalies.