Applications for Behavioral Analytics in Zero-Trust Security Models

When zero trust is all about identity, behavioral analytics allows organizations to establish a baseline of "normal" user actions, such as logging in from a particular IP address, using a specific device or logging in every day during a similar timeframe. Anything that deviates from this baseline can result in an anomaly -- for example, logging in from a different country at a different time than usual. Continuous monitoring during the detect stage can flag potential threats and allow for prompt investigation. Behavioral analytics help to identify unusual patterns of activity that may be happening on the organization's network or within its cloud applications. The ability to detect and respond to these types of threats as they surface is critical in ensuring a zero-trust environment, and these behavioral analytics can help to detect outside threats from bad actors as well as inside threats from disgruntled employees or compromised accounts.