The problem of the use of Markov chains to build statistical model of user behavior information system to identify anomalous activity. To test the hypothesis the feasibility of such an approach in the framework of e- medical records software system designed experiments with which showed that the considered approach can be successfully used for detecting abnormal activity in a particular information systems that operate on sensitive data.