1. A server system for monitoring user authenticity during user activities in user sessions on at least one application server, the server system comprising: one or more processors; and at least one memory comprising program code that, when executed by the one or more processors, causes the one or more processors to: perform a user-modeling process in which a user model is adapted session-by-session to user activities, wherein the user model includes a plurality of adaptive feature-specific user-behavior models that are associated with features indicative of user behavior; and perform a user-verification process comprising: determining a plurality of feature-specific risk-score values, wherein determining each feature-specific risk-score value comprises comparing the at least one adaptive feature-specific user-behavior model with each respective feature extracted from one or more of the user activities during one of the user sessions on the at least one application server, determining a total risk-score value indicative of user non-authenticity by: a) weighting and combining the feature-specific risk-score values, or b) weighting and combining pre-combined risk-score values, wherein the pre-combined risk-score values is determined by combining a portion of the feature-specific risk-score values using multi-criteria decision analysis, and in response to the total risk-score value exceeding a given threshold, performing a corrective action selected from the group consisting of (i) signing out the user, (ii) requesting a two-factor authentication from the user, (iii) locking the user, and (iv) initiating an alert function.