ANOMALY DETECTION IN POLICY AUTHORIZATION ACTIVITY LOGS