Behavioral user security policy

One or more tangible, non-transitory computer-readable mediums having stored thereon executable instructions to:

• monitor a security factor for a human user, the security factor selected from websites visited, reputation of websites visited, content downloaded, reputation of content downloaded, stored cookies, user security settings, and use of browser incognito mode;
• based on the security factor, compute a risk factor of the human user's operation of a computer comprising computing a quantitative risk score, and comparing the quantitative risk score to a threshold to select a risk factor for the human user;
• and
• adjust a sensitivity of a security scan of a computer according to the risk factor, wherein the security scan comprises a fuzzy hash, and the sensitivity comprises a detection threshold of the fuzzy hash that balances threat detection with false positives.

A computer-implemented method of providing a behavioral user security policy, comprising:

• programmatically observing a human user's network behavior over time;
• based on the observing, computing a risk factor of the user's operation of a computer, the risk factor based on an observed user behavior affecting network vulnerability wherein computing the risk factor comprises computing a quantitative risk score, and comparing the quantitative risk score to a threshold to select a risk factor for the human user;
• and
• adjusting a detection threshold of a security scan according to the risk factor, wherein the security scan comprises a fuzzy hash and the detection threshold comprises a sensitivity of the fuzzy hash, wherein the sensitivity balances threat detection with false positives.