How Important is Identity as a Threat Plane?
Cyber security leaders talk about the importance of identity as a threat plane. Let’s look at insider threats. Insider threats arise when there is a change in behavior of an insider or when an outsider has access to the insider’s credentials (account hijacking). In both scenarios, there is anomalous behavior exhibited by the identity. How important is identity as a threat plane? Many security solutions do not use identity as a primary threat plane and perform analytics on security events separately. This can cause one to miss the underlying motivation of connected events via a single identity.
Gurucul Risk Analytics (GRA) uses identity as a threat plane with behavior analytics data science to surface unknown risks and threats.