What is Behavioral Anomaly Detection

An approach or a mechanism that would establish a baseline model, profile normal user behavior for individuals whom reside in organizations and have authorized access to organizational internal and external resources, which include accessibility to systems, networks, applications, and facilities; an approach or a mechanism that would detect and alert individual deviational behavior that is uncommon, peculiar, irregular, and abnormal, and perceive, identify or suggest that a possible insider threat would come from specific perpetrator(s), a series suspicious events or eccentric states.

Cyber Insider Threat in Virtual Organizations

Shuyuan Mary Ho (Florida State University, USA) and Jonathan M. Hollister (Florida State University, USA)