D3FEND 技术详情

D3-ANET

D3-ANET

Authentication Event Thresholding

定义

Collecting authentication events, creating a baseline user profile, and determining whether authentication events are consistent with the baseline profile.

父技术
子技术
关联构件
暂无关联构件
语义关系
出向analyzesAuthentication
出向kb referenceReference - Method and Apparatus for Network Fraud Detection and Remediation Through Analytics - Idaptive LLC
出向kb referenceReference - CAR-2013-02-008: Simultaneous Logins on a Host - MITRE
出向kb referenceReference - System, method, and computer program product for detecting and assessing security risks in a network - Exabeam Inc
出向kb referenceReference - CAR-2013-02-012: User Logged in to Multiple Hosts - MITRE
出向kb referenceReference - CAR-2013-10-001: User Login Activity Monitoring - MITRE