The difference between UEBA and UBA
UEBA was previously called User Behaviour Analytics
(UBA), which involved monitoring systems to track, collect and assess user data logs, behaviours
and activities.
However, with the increasing threats from external sources and entities like routers,
applications or servers that could be compromised, ‘Entity’ was included in UBA by the Gartner
Market Guide as individual users weren’t the sole source of a compromise anymore. With UEBA
security, cybersecurity experts can detect suspicious behaviours without needing predetermined
patterns or rules. Here are more differences between both types of behavioural security
analytics.
Essentially, user and entity behaviour analytics is an extension of user behaviour analytics. This
is because UEBA observes anomalies from the user’s behaviours and those from entities separate from
the individual user.