Analysis of employee computer behavior (UBA)
User Behavior Analytics analyzes employee computer activity on various parameters and quickly detects information security threats and productivity losses. DLP SecureTower automatically detects the level of threat, reacts to the incident and sends a notification.
The UBA module SecureTower provides:
Monitoring of employee performance
Monitoring of employee loyalty
Protection against confidential data leaks
Block access to specific sites
Blocking specific applications from running
Control over employee communication in messengers or social networks
Control over operations with confidential data
Controls of information copying
How it works
1. The SecureTower DLP system monitors and remembers all the actions of an employee on his computer:
- Start and end of work
- Time of activity and idle time
- Running programs
- Data modification and deletion
- Web traffic
- Communication in messengers and social networks
- Connected devices
- Print files
2. DLP SecureTower analyzes the received employee behavior based on machine learning algorithms and statistical evaluation.
If an employee's behavior deviates from the predefined/typical one, the system identifies an incident and assigns it the appropriate risk level.
3. The SecureTower DLP system acts according to the security policy settings:
- Sends a notification to a supervisor or security officer.
- Blocks files from being sent or downloaded
- Blocks an employee's access to the Internet (or specific sites)
- Blocks programs from running
- Blocks files from being sent to print
- Blocks connections to devices