OVERVIEW OF BEHAVIORAL ANALYTICS SYSTEMS FOR INFORMATION PROTECTION

Abstract

Methods of behavioral analysis came into business and management practice from psychology, and in recent years have found application in the protection of information infrastructure. Behavioral analysis technologies have been developed and implemented in the form of information security software abroad; now they are all actively used by Russian companies to detect and respond to information security threats. User and Software Entity Behavior Analysis (UEBA) automatically detects suspicious user activity or other events in the protected information infrastructure that indicate the risk of a threat being implemented in order to promptly suppress such threats. An analytical review of specific implementations of UEBA technology for solving information security problems has been performed.