User and Entity Behavior Analytics

if the attacker is already in the system

To detect changes in the user behavior – which often indicate an internal attack – the user and entity behavior analytics (UEBA) by Aruba relys on AI-based machine learning. Security teams see behind the curtain of malicious, insecure or negligent users, systems and devices and can nip the threat in the bud before they do damage.

 

IT organisations of every size invest more and more for protecting they're networks and systems. In addition to the increasing number of threats,  the typical IT security environment changes rapidly:

  • The number and types of devices useres may deploy to access the company resources rises steadily
  • Cloud-based applications (Box, salesforce, and so on) permit the access beyond the company IT control.
  • External establishments for partners and contractors need access to high quality systems to increase the efficiency of business processes. 
  • Non-traditional IoT-devices access the corporate network.

The result is that it used to be a matter of defending the castle (the corporate network) with a moat (security products at the entrance and exits). Now it’s about protecting a borderless, uncontained collection of employees, contractors and partners – all using multiple devices from anywhere, at any time – from outside and within the secure boundaries of the corporate network.

Fortunately, today there are solutions like Aruba IntroSpect that use UEBA. Aruba IntroSpect detects small changes in the behavior that often indicate attacks which have bypassed the conventional security procedures. As cyber security experts, we clearly recommend this new technology.

 

If you would like to know how IntroSpect can also increase your Cyber Defence, please contact us.

Or download now the free whitepaper "The CISO's guide to Machine Learning & User and Entity Behavior Analytics (UEBA)" by Aruba and learn more about UEBA.

Aruba-Partner-InfoGuard

Download

Whitepaper UEBA

Download WP Aruba IntroSpect EN