Saturday 26 September 2015

Term of the day- "User Threat Quotient"

Cyberoam, a leading global provider of network security appliances has introduced a unique capability – User Threat Quotient (UTQ) – to help IT security managers identify users posing security risks with ease. The User Threat Quotient (UTQ) studies the web behavior of users by analyzing massive data of allowed and denied web traffic for web categories like IP Address, P2P, Phishing and Fraud, Porn, Spam URL, Spyware, URL Translation Sites and more that pose security and legal risks.
UTQ helps administrator to
   • Spot risky users at a glance.
   • Find out malicious insiders.
   • Avoid chances of human oversight in correlating data from various logs and reports.
   • Take appropriate actions like fine-tuning security policies, security awareness training etc.

UTQ report is displayed in the form of bubble graph as well as in a tabular format. The bubble graph is plotted between Relative Risk Ranking and Average Threat Score, where the bubble represents the user and bubble size represents Average Threat posed by the user. Mouse over on the bubble displays details like Average Threat Score, Relative Risk Ranking and Maximum Threat Score along with date.
The bubble graph area is divided into three sections where;
  • Top 10% are marked as High Risk Users
  • Next 40% are marked as Medium Risk                Users
   • Last 50% are marked as Low Risk Users.