actively monitoring data streams in search of malicious code or behavior is an example of