SecArmy: Tracking 'insider threats' challenging