These pathogens are obviously unauthorised and unwelcome. Staying alert to unauthorised computer network activity similarly requires identification of behaviour that is out of the ordinary.