Adaptive trust profile behavioral fingerprint

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• monitoring an electronically-observable action of an entity, the electronically-observable action of the entity corresponding to an event enacted by the entity, the entity comprising a user entity, the user entity enacting a user behavior;
• converting the electronically-observable action of the entity to electronic information representing the action of the entity;
• generating the behavioral fingerprint based upon observations associated with the action of the entity, the behavioral fingerprint comprising a distinctive, characteristic indicator of an identity of an enactor of an entity behavior;
• using the behavioral fingerprint in combination with an adaptive trust profile to generate an inference regarding the entity;
• performing a security analytics operation via a security analytics system, the security analytics operation using the behavioral fingerprint and the inference regarding the entity to determine whether a particular event is of analytic utility, the particular event being of analytic utility indicating entity behavior representing a security risk;
• and,
• mitigating a security risk via the security analytics system based upon the inference when the particular event is of analytic utility.

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• monitoring an electronically-observable action of an entity, the electronically-observable action of the entity corresponding to an event enacted by the entity, the entity comprising a user entity, the user entity enacting a user behavior;
• converting the electronically-observable action of the entity to electronic information representing the action of the entity;
• generating the behavioral fingerprint based upon observations associated with the action of the entity, the behavioral fingerprint comprising a distinctive, characteristic indicator of an identity of an enactor of an entity behavior;
• using the behavioral fingerprint in combination with an adaptive trust profile to generate an inference regarding the entity;
• performing a security analytics operation via a security analytics system, the security analytics operation using the behavioral fingerprint and the inference regarding the entity to determine whether a particular event is of analytic utility, the particular event being of analytic utility indicating entity behavior representing a security risk;
• and,
• mitigating the security risk via the security analytics system based upon the inference when the particular event is of analytic utility.