Active authentication using file system decoys and user behavior modeling: results of a large scale study