IBM Cyber Security Center of Excellence (CCoE)

User Behavior Analytics
(Completed project)

In this project, CCoE researchers in collaboration with developers from IBM Security designed and developed an extension of the IBM QRadar security intelligence platform, allowing to analyze the usage patterns of insiders to determine if their credentials or systems have been compromised. This work was productized and announced by IBM's Security Division on July 28, 2016.

• IBM announcement
• Product page

Publications

Bar Haim, Eitan Menahem, Yaron Wolfsthal, Chris Meenan: Visualizing Insider Threats: An Effective Interface for Security Analytics, Proceedings of the 22nd ACM Intelligent User Interface Conference, March 13-16 2017, Cyprus