Security System Using Pseudonyms to Anonymously Identify Entities and Corresponding Security Risk Related Behaviors

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• receiving a plurality of resolved events, wherein the plurality of resolved events are associated with the plurality of different entities using entity names;
• enriching the events of the plurality of resolved events with corresponding entity pseudonyms to thereby provide a plurality of pseudonymized events;
• executing security analytics operations on the plurality of pseudonymized events to identify user security risks;
• and
• using the entity pseudonyms to anonymously identify entities engaging in security risk related behaviors.

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• receiving a plurality of resolved events, wherein the plurality of resolved events are associated with the plurality of different entities using entity names;
• enriching the events of the plurality of resolved events with corresponding entity pseudonyms to thereby provide a plurality of pseudonymized events;
• executing security analytics operations on the plurality of pseudonymized events to identify user security risks;
• and
• using the entity pseudonyms to anonymously identify entities engaging in security risk related behaviors.