Posted on

4 Challenges of Using Anonymous User Data for UEBA

User and entity behavior analytics (UEBA) tools support a cybersecurity strategy by looking for anomalies. These tools establish a baseline usage for users, devices, and networks, then flag cybersecurity teams about significant deviations from those norms. People are highly interested in how user behavior analytics could cut cyberattack risks. One market analysis showed that the UEBA sector was worth $1.2 billion in 2022. However, researchers believe it will get to $4.2 billion by 2026.

However, the push towards anonymizing user data for the sake of privacy could hinder that growth. User and entity behavior analytics work best when decision-makers at the companies using the technology can narrow down potential problems. Anonymous UEBA data would limit the trends it's possible to pinpoint. Here's a closer look at why anonymized information is not a good fit for UEBA platforms.

Posted on

User and Entity Behavior Analytics

I had the opportunity to meet with Harish Sekar, Manager of Bus Dev for ManageEngine, during their user conference in Dallas to discuss the user and entity behavior analytics (UEBA) that were integrated into ManageEngine's SIEM solution, Log360.

Five years ago, an admin or IT manager had to turn on a few settings to get information about network activity. Now, with ongoing attacks, you cannot keep asking admins or IT to reconstruct their environment every time an attack takes place. Today, IT just has to feed the logs in, and Log360 automatically scores user behavior based on activity patterns, time inside, and resources touched to help analyze and identify the wrongdoers, be they clueless employees or bad actors. Don’t spare anyone if they're doing something that's not safe; it's still a problem.