首页>
外国专利>
System and method for modeling behavior change and consistency to detect malicious insiders
System and method for modeling behavior change and consistency to detect malicious insiders
展开▼
机译:用于对行为变化和一致性进行建模以检测恶意内部人员的系统和方法
展开▼
页面导航
摘要
著录项
相似文献
摘要
One embodiment of the present invention provides a system for identifying anomalies. During operation, the system obtains work practice data associated with a plurality of users. The work practice data includes a plurality of user events. The system further categorizes the work practice data into a plurality of domains based on types of the user events, models user behaviors within a respective domain based on work practice data associated with the respective domain, and identifies at least one anomalous user based on modeled user behaviors from the multiple domains.
展开▼