Cyber security leaders talk about the importance of identity as a threat plane.
Insider threats arise when there is a change in behavior of an insider or when an outsider has access to the insider’s credentials (e.g. account hijacking). In both scenarios there is anomalous behavior exhibited by the identity. Many security solutions do not use identity as a primary threat plane and perform analytics on security events separately. This can cause one to miss the underlying motivation of connected events via a single identity.
Gurucul’s Risk Analytics (GRA) uses identity as a threat plane with behavior analytics data science to surface unknown risks and threats.