Jump to content

User behavior analytics

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Plusoneplusone (talk | contribs) at 05:26, 20 September 2022 (I think it would be better to delete the mention of a specific company enhancing user behavior analytics in the introduction paragraph to avoid sounding like an advertisement. I might be overdoing this, please feel free to reverse the change if felt necessary.). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

User behavior analytics (UBA) is a cybersecurity process about detection of insider threats, targeted attacks, and financial fraud that tracks a system's users. UBA looks at patterns of human behavior, and then analyzes them to detect anomalies that indicate potential threats.[1][2]

Purpose

UBA's purpose, according to Johna Till Johnson of Nemertes Research, is that "Security systems provide so much information that it's tough to uncover information that truly indicates a potential for real attack. Analytics tools help make sense of the vast amount of data that SIEM, IDS/IPS, system logs, and other tools gather. UBA tools use a specialized type of security analytics that focuses on the behavior of systems and the people using them. UBA technology first evolved in the field of marketing, to help companies understand and predict consumer-buying patterns. But as it turns out, UBA can be extraordinarily useful in the security context too."[3]

See also

References