jonsmith avatar

A User and Entity Behavior Analytics Scoring System Explained

jonsmith

Published: 14 Mar 2017 › Updated: 14 Mar 2017A User and Entity Behavior Analytics Scoring System Explained

A User and Entity Behavior Analytics Scoring System Explained

 How risk assessment for UEBA (user entity behavior analytics) works is not unlike how humans assess risk in our surrounding environment. When in an unfamiliar setting, our brain constantly takes in data regarding objects, sound, temperature, etc. and weighs different sensory evidence against past learned patterns to determine if and what present risk is before us. 

A UEBA system works in a similar manner. Data from different log sources, such as Windows AD, VPN, database, badge, file, proxy, endpoints, etc. are ingested. Given these inputs and learned behaviors, how do we fuse the information to make up a final score for risk ranking? source

Leave A User and Entity Behavior Analytics Scoring System Explained to:

Written by

Read more #hacking posts


Best Posts From jonsmith

We have not curated any of jonsmith's posts yet. But you can encourage our curation team to review posts by visiting them regularly and by referring other readers. Because we give priority to frequently read content.

More Posts From jonsmith