Search International and National Patent Collections

1. (WO2017200558) METHOD, APPARATUS, AND COMPUTER-READABLE MEDIUM FOR DETECTING ANOMALOUS USER BEHAVIOR

Pub. No.:    WO/2017/200558    International Application No.:    PCT/US2016/037847
Publication Date: Fri Nov 24 00:59:59 CET 2017 International Filing Date: Fri Jun 17 01:59:59 CEST 2016
IPC: G06F 11/00
Applicants: INFORMATICA LLC
Inventors: BALABINE, Igor
Title: METHOD, APPARATUS, AND COMPUTER-READABLE MEDIUM FOR DETECTING ANOMALOUS USER BEHAVIOR
Abstract:
An apparatus, computer-readable medium, and computer-implemented method for detecting anomalous user behavior, including storing user activity data collected over an observation interval, the user activity data comprising a plurality of data objects and corresponding to a plurality of users, grouping a plurality of data objects into a plurality of clusters, calculating one or more outlier metrics corresponding to each cluster, calculating an irregularity score for each of one or more data objects in the plurality of data objects, generating one or more object postures for the one or more data objects, comparing each of at least one object posture in the one or more object postures with one or more previous object postures corresponding to a same user as the object posture to identify anomalous activity of one or more users in the plurality of users.