International Business Machines Corporation

Jerry Pan

Michael Josiah Bolding

Dominique J Paster

Jian Lin

Timothy A Thornburgh

Wesley Truett

Peihao Chen

An approach is provided that receives event data that correspond to detected activities performed by a user on one of a set of one or more computer systems. The detected activities are performed by the user over a time duration. The approach analyzes the event data using time-based models. Each of the time-based models correspond to a different time interval that is included in the time duration. The analysis results in time-based risk scores pertaining to the user for each of the different time intervals. An action is then performed based on an overall security risk score of the user with the overall security risk score of the user being calculated based on the different time-based risk scores.

Growing community of inventors

Roswell, GA, United States of America

Jerry Pan