SafeNET UEBA

The main objective of the SafeNet UEBA project is the design and implementation of a Security Operations Center (SOC) that enables the detection of cyberattacks based on UEBA using statistical and artificial intelligence (AI) techniques. The solution will allow the incorporation of a wide variety of data sources, which, once normalized and aggregated, will be used to build a robust pattern of user, device, or entity behavior. The detected threats will be enriched with external sources such as Indicators of Compromise using the MISP threat intelligence platform.