System security configurations based on assets associated with activities

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

• determining a first asset of a cluster associated with a first plurality of activities of the one or more accounts;
• determining a second asset of the cluster associated with a second plurality of activities of the one or more accounts;
• determining a respective weight for each of the first asset and the second asset;
• predicting a scalable attack associated with the one or more accounts based at least on the respective weights determined;
• and
• generating a notification that indicates the scalable attack detected.

A method, comprising:

• segmenting, by a data engine, one or more data populations of an account based at least on one or more time periods;
• preparing, by the data engine, a plurality of assets associated with the one or more data populations segmented;
• clustering, by the data engine, the plurality of assets with a plurality of activities associated with the account;
• generating, by the data engine, one or more variables associated with the plurality of assets clustered with the plurality of activities;
• and
• classifying, by the data engine, the plurality of assets clustered with the plurality of activities.