1. A method of detecting an anomalous operation of a computer system, the method comprising: (a) monitoring transitions across defined points within software executing on the computer system and in response thereto producing given data; (b) comparing the given data with data indicative of a normal operation of the computer system; and (c) as a result of the comparison, taking a given action.