home

UEBA

UEBA

(also user and entity behavior analytics, previously user behavior analytics)

UEBA definition

A cybersecurity solution for detecting potential threats based on network anomalies. UEBA tools use AI and machine learning to establish a baseline for user and device behavior on a network, then monitor that network for any suspicious irregularities.

Real UEBA benefits

• Covers multiple angles of attack by monitoring both user and machine behavior
• Detects suspicious behavior early so that you can stop cyberattacks in progress
• Effective against unknown threats since UEBA checks unexpected behavior instead of a list of predefined scenarios (like virus databases)

Further reading

What is data mining and why is it important?

Artificial intelligence in cyber security: pros and cons

What is machine learning?