Provenance & System Log AnalysisProvenance-Graph DetectionStreamSpot'16 ACM SIGKDDStreamSpot'16 ACM SIGKDD