Baseline Modeling
A common paradigm in anomaly detection that builds a statistical profile of normal behavior for an entity and quantifies the degree of anomaly by comparing real-time behavior against the baseline.
Timeline (last 90 days)
Baseline modeling is a common paradigm for anomaly detection: first build a statistical profile of each entity's normal behavior, then compare real-time behavior against the baseline and quantify the anomaly by degree of deviation.
The difficulty of baseline modeling lies in the lack of historical data for cold-start entities and in baselines being slowly poisoned by attackers, so cross-validation with group baselines is often needed.
All Facts (2)
Baseline modeling is a common paradigm for anomaly detection: first build a statistical profile of each entity's normal behavior, then compare real-time behavior against the baseline and quantify the anomaly by degree of deviation.
50%UnverifiedThe difficulty of baseline modeling lies in the lack of historical data for cold-start entities and in baselines being slowly poisoned by attackers, so cross-validation with group baselines is often needed.
50%