FortiSIEM Machine Learning: Bipartite Graph Edge Anomaly Detection | Security Operations

preview_player
Показать описание
#FortiSIEM uses a proprietary Machine Learning algorithm that detects login anomalies by learning the user-to-workstation login patterns and forming dynamic peer user groups with similar login patterns. Users and workstations are represented using a bipartite graph. In a bipartite graph, the sets of nodes can be split into two disjoint sets, in such a way that there are no edges between the nodes within the same set. In this example, users and workstations form a bipartite graph, where the edge between a user and a workstation represents a login, and the edge weight represents the number of logins during a time interval.

Explore the #Fortinet product demo center:

More Fortinet demo videos:

Рекомендации по теме