Definition

network behavior anomaly detection (NBAD)

Network behavior anomaly detection (NBAD) is the continuous monitoring of a proprietary network for unusual events or trends. NBAD is an integral part of network behavior analysis (NBA), which offers an additional layer of security to that provided by traditional anti-threat applications such as firewalls, antivirus software and spyware-detection software.

An NBAD program tracks critical network characteristics in real time and generates an alarm if an anomaly or strange trend is detected that might indicate the presence of a threat. Large-scale examples of such characteristics include increased traffic volume, bandwidth use and protocol use.

An NBAD program can also monitor the behavior of individual network subscribers. In order for NBAD to be optimally effective, a baseline of normal network or user behavior must be established over a period of time. Once certain parameters have been defined as normal, any departure from one or more of them can be flagged.

NBAD should be used in addition to conventional firewalls and applications for the detection of malware. Some vendors include NBA/NBAD components as part of their standard network security software suites.

This was last updated in November 2015

Continue Reading About network behavior anomaly detection (NBAD)

Dig Deeper on Network Behavior Anomaly Detection (NBAD)

PRO+

Content

Find more PRO+ content and other member only offers, here.

Join the conversation

1 comment

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

What other types of decision-support software does your IT department rely on?
Cancel

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close