Sad: State Machine-Based Anomaly Detection In User Behavior