The Triple Pot and techniques in distributed system call intrusion detection