Monitoring DBMS activity to detect insider threat using query selectivity