User entity behavioral analysis for preventative attack surface reduction

A computer device for reducing computer security threats in a network, comprising:

• a memory to store data and instructions;
• and
• a processor in communication with the memory to execute the instructions to:
• monitor, at a network computer, a usage behavior for a plurality of computer devices in the network, wherein the usage behavior identifies one or more applications or services that the plurality of computer devices previously executed during a monitoring time period;
• group the plurality of computer devices in one or more clusters based on the usage behavior;
• identify attack surface reduction (ASR) parameters for each of the one or more clusters, wherein the ASR parameters identify one or more capabilities of the plurality of computer devices in each of the one or more clusters that are configured to be selectively disabled to improve cyber security profile;
• and
• disable the one or more capabilities of the plurality of computer devices based at least on the ASR parameters.

A computer-readable medium storing instructions executable by a computer device for reducing computer security threats in a network, the instructions comprising code for:

• monitoring, at a network computer, usage behaviors for a plurality of computer devices in the network, wherein the usage behaviors identifies one or more applications or services that the plurality of computer devices previously executed during a monitoring time period;
• grouping the plurality of computer devices in one or more clusters based on the usage behaviors;
• identifying attack surface reduction (ASR) parameters for each of the one or more clusters, wherein the ASR parameters identify one or more capabilities of the plurality of computer devices in each of the one or more clusters that are configured to be selectively disabled to improve cyber security profile;
• and
• disabling the one or more capabilities of the plurality of computer devices based at least on the ASR parameters.