Method, apparatus, and computer-readable medium for detecting anomalous user behavior
US10257211B2 · kind B2 · utility
Assignee
Inventor
Key dates
| Filing date | May 20, 2016 |
| Grant date | Apr 9, 2019 |
| Priority date | — |
| Expiry date | Oct 8, 2036 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F16/951
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
An apparatus, computer-readable medium, and computer-implemented method for detecting anomalous user behavior, including storing user activity data collected over an observation interval, the user activity data comprising a plurality of data objects and corresponding to a plurality of users, grouping a plurality of data objects into a plurality of clusters, calculating one or more outlier metrics corresponding to each cluster, calculating an irregularity score for each of one or more data objects in the plurality of data objects, generating one or more object postures for the one or more data objects, comparing each of at least one object posture in the one or more object postures with one or more previous object postures corresponding to a same user as the object posture to identify anomalous activity of one or more users in the plurality of users.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.