Defeating MitB attacks with Clickstream,or fraud prev with behavioural profiling [pdf]
compass-security.com