LATEST INTELLIGENCE
FIVE THINGS YOU SHOULD KNOW ABOUT USER BEHAVIOUR ANALYTICS
As the threat landscape continues to evolve at an alarming rate , Gartner predicts that the market for user behavior analytics ( UBA ) will grow at a steep 48 % CAGR between 2015 and 2020 . So if you ’ re not familiar with UBA already , it ’ s about time
you got acquainted . The following five topics will tell you everything you need to know about UBA .
1 . What UBA has to offer
3 . UBA vs . rogue insiders
A disgruntled employee departing from the organisation decides to exfiltrate data . They know the location of critical documents and decide to copy a handful of only the most important files , careful not to trigger the organisation ’ s alerting system based on file activity volume .
4 . UBA vs . compromised accounts
Behavioral analytics was first applied in the field of marketing to help companies understand and predict consumer buying patterns . Today , behavioral analytics is used to detect potential threats in the cybersecurity space .
2 . How UBA works
UBA solutions first collect information on what users across the organisation are doing over an extended period of time . They then create a baseline of “ normal ” activities specific to every single user . And finally , whenever there is a deviation from that norm , the solution notifies the concerned personnel .
An attacker with stolen credentials wants to widen his control within the network , so he targets other systems using RDP to gain remote access to other hosts on the network . The attacker knows that administrators typically check for a high volume of failed logins to detect such attacks , so he ’ s careful not to cause many failed logons and in the process trigger a logon failure volume-based alert .
5 . UBA vs . external threats
An employee clicks on a malicious link , immediately downloading malware that encrypts their data and starts spreading across the network . p
PRESENTED BY
www . intelligentcio . com INTELLIGENTCIO AFRICA 17