Spotting and, perhaps, stopping the malicious insider