Stellar Cyber Adds User Behavior Analytics to Security App Store
App provides global view of user behavior to better track threats
The UBA App in Stellar Cyber’s Starlight platform collects and fuses user-relaventdata from a variety of data sources such as network traffic, Active Directory logs, and applications like Office365. It applies sophisticated behavioral analytics through machine learning. It baselines users’ typical behavior in order to detect users’ anomalous activities. It can rapidly detects bad behaviors without writing any rules or signatures. With this, coupled with other relevant security events detected with many tightly-integrated security applications such as malware detection, the UBA App can quickly detetct malicious users or compromised users.
UBA gives the holistic view of all users’ activities, abnormal behaviors, security events and the associated security risk. Rather than focusing on malware delivery events or data exfiltration events, for example, the UBA App provides a global view of user activity. And, as an integrated security toolkit and by fusing data from variety of sources, the Starlight platform works with other apps in its Security App Store to easily enable analysts to cross-check events to elevate a given user’s risk score.
“With conventional products, UBA is a complex and laborious process,” said Ilker Simsir, Principal Product Managerat Stellar Cyber. “Our UBA app makes it much easier to track threats on a per-user basis because it correlates events from throughout the kill chain.”
Helpful Stellar Cyber links
About Stellar Cyber
Stellar Cyber makes Starlight, the only comprehensive security platform providing maximum protection of applications and data wherever they reside and automatically responding to attacks wherever they occur. Starlight tightly integrates dozens of security applications from an App Store and presents results in an intuitive dashboard to supercharge analyst productivity by slashing attack response times to seconds or minutes. Starlight deploys easily on premises, in public clouds or with service providers. Stellar Cyber is based in Silicon Valley and is backed by Valley Capital Partners, Northern Light Venture Capital, SIG and other investors. For more information, contact https://stellarcyber.ai.