11. The computer system of claim 10 , wherein the behavior model includes time-stamped vectors.
11. The computer system of claim 10 , wherein the behavior model includes time-stamped vectors. 13. The computer system of claim 11 , wherein the processor is to correlate two or more of the time-stamped vectors to identify a change in a usage pattern of one of the identified applications.