Network Behavior Analysis (NBA), also known as “Behavior Monitoring” is the collection and analysis of internal network data to identify malicious or unusual activity. Behavioral monitoring tools analyze information from a wide range of sources and use machine learning to identify patterns that could suggest an attack is taking place. When NBAs are conducted over an extended period of time, behavior monitoring allows organizations to benchmark typical network behavior, helping identify deviations; anomalies identified can be escalated for further analysis. Network analysis tools provide valuable insight to help businesses defend against the latest cyber threats. NBA is especially good at spotting new malware and zero day vulnerabilities.
Source: RedScan, TechTarget
Additional Reading: As Network Security Analysis Proves Invaluable, NDR Market Shifts
Related Terms: Intrusion Detection, Firewall