James Strachan wrote:
Incidentally this Dapper paper from Google is an interesting one about using heuristics to decide when to do detailed monitoring/auditing...
Thanks James, this could also be interesting. Alex will definitly want to read it as it sounds like it will be worth discussing in his thesis.