US9954872B2 - System and Method for Identifying Unauthorized Activities on a Computer System Using a Data Structure Model