Statistics for Forensic Analysis in Access Control: a Case-Study of a Cloud Application