title: Ð¢Ð¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¸Ðµ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ñ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð´Ð°Ð½Ð½ÑÑ Ð² Ð·Ð°Ð´Ð°ÑÐµ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð¹ Ð°Ð½Ð°Ð»Ð¸ÑÐ¸ÐºÐ¸ Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»ÐµÐ¹ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐµÑÑÑÑÐ¾Ð²
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Topological algorithms of data analysis in the problem of behavioral analytics of users of information resources
Creators: name: ÐÐµÐ¶ÐµÐ½ÐµÐ²Ð°, ÐÑÐ¸Ð½Ð°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2021
Subjects: UEBA
TDA
Ð¿ÐµÑÑÐ¸ÑÑÐµÐ½ÑÐ½Ð°Ñ Ð³Ð¾Ð¼Ð¾Ð»Ð¾Ð³Ð¸Ñ
Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ ÑÑÐ´Ñ
ÐºÐ¸Ð±ÐµÑÐ±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ
persistent homology
time series
cyber security

description: Ð ÑÐ°Ð±Ð¾ÑÐµ Ð±ÑÐ» Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½ Ð¼ÐµÑÐ¾Ð´ ÑÐ¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð´Ð°Ð½Ð½ÑÑ (TDA) Ð´Ð»Ñ ÑÐ¸ÑÑÐµÐ¼ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½ÑÐµÑÐºÐ¾Ð¹ Ð°Ð½Ð°Ð»Ð¸ÑÐ¸ÐºÐ¸ Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»ÐµÐ¹ Ð¸ ÑÑÑÐ½Ð¾ÑÑÐµÐ¹ (UEBA). Ð Ð¾ÑÐ½Ð¾Ð²Ðµ Ð¼ÐµÑÐ¾Ð´Ð° Ð»ÐµÐ¶Ð¸Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ðµ ÑÐµÐ¾ÑÐ¸Ð¸ ÑÑÑÐ¾Ð¹ÑÐ¸Ð²ÑÑ (Ð¿ÐµÑÑÐ¸ÑÑÐµÐ½ÑÐ½ÑÑ) Ð³Ð¾Ð¼Ð¾Ð»Ð¾Ð³Ð¸Ð¹. ÐÑÐ»Ð¸ ÑÐ°ÑÑÐ¼Ð¾ÑÑÐµÐ½Ñ Ð¸Ð·ÑÑÐµÐ½Ñ Ð¼ÐµÑÐ¾Ð´Ñ TDA Ð¸ Ð¿ÑÐ¸Ð²ÐµÐ´ÐµÐ½Ñ Ð½ÐµÐ¾Ð±ÑÐ¾Ð´Ð¸Ð¼ÑÐµ Ð¿Ð¾Ð½ÑÑÐ¸Ñ ÑÐµÐ¾ÑÐ¸Ð¸ Ð³ÑÑÐ¿Ð¿Ñ, Ð°Ð»Ð³ÐµÐ±ÑÐ°Ð¸ÑÐµÑÐºÐ¾Ð¹ ÑÐ¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸Ð¸ Ð¸ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð³ÐµÐ¾Ð¼ÐµÑÑÐ¸Ð¸. ÐÐ·Ð½Ð°ÐºÐ¾Ð¼Ð»ÐµÐ½Ð¸Ðµ Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸ÐµÐ¼ ÑÐ¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ðº Ð·Ð°Ð´Ð°ÑÐ°Ð¼ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¿Ð¾ÐºÐ°Ð·Ð°Ð»Ð¾, ÑÑÐ¾ Ð² Ð¾ÑÐ½Ð¾Ð²Ð½Ð¾Ð¼ Ð¾Ð½Ð¸ Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ñ Ð·Ð°Ð´Ð°ÑÐµ Ð²Ð¸Ð·ÑÐ°Ð»ÑÐ½Ð¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¾Ð±ÑÑÐ¸Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÑÐ¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¾Ð¹ ÐºÐ»Ð°ÑÑÐµÑÐ¸Ð·Ð°ÑÐ¸Ð¸ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ð° Mapper. ÐÐ½Ð°Ð»Ð¸Ð·Ð¸ÑÑÐµÐ¼ÑÐµ Ð´Ð°Ð½Ð½ÑÐµ Ð¿ÑÐµÐ´ÑÑÐ°Ð²Ð»ÐµÐ½Ñ Ð¼Ð½Ð¾Ð¶ÐµÑÑÐ²Ð¾Ð¼ Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÑ ÑÑÐ´Ð¾Ð², ÑÐ¾Ð¾ÑÐ²ÐµÑÑÑÐ²ÑÑÑÐ¸Ñ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¾ Ð¿Ð¾Ð²ÐµÐ´ÐµÐ½Ð¸Ð¸ Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»ÐµÐ¹. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» Ð½Ð°Ð¿Ð¸ÑÐ°Ð½ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÐ¹ Ð¼Ð¾Ð´ÑÐ»Ñ Ð½Ð° ÑÐ·ÑÐºÐµ Python Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ðµ Ð±Ð¸Ð±Ð»Ð¸Ð¾ÑÐµÐºÐ¸ ÑÐ¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Giotto-tda, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐ¸Ð¹ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÑ. ÐÑÐ¸Ð²Ð¾Ð´ÑÑÑÑ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¿ÑÐ°ÐºÑÐ¸ÑÐµÑÐºÐ¾Ð¹ Ð°Ð¿ÑÐ¾Ð±Ð°ÑÐ¸Ð¸ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ Ðº Ð´Ð°Ð½Ð½ÑÐ¼ ÑÐ¸ÑÑÐµÐ¼Ñ Ð¼Ð¾Ð½Ð¸ÑÐ¾ÑÐ¸Ð½Ð³Ð° ÑÐ°Ð±Ð¾ÑÑ Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»ÐµÐ¹ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐµÑÐ¸.
description: The paper proposes a method of topological data analysis (TDA) for systems of users and entities behavioral analytics (UEBA). The method is based on the application of the theory of persistent homology. The TDA methods were considered, and the necessary concepts of group theory, algebraic topology, and computational geometry were presented. Familiarization with the application of topological analysis to information security problems showed that they are mainly devoted to the problem of visual analysis of security events using topological clustering based on the Mapper algorithm. The analyzed data is represented by a set of time series corresponding to information about user behavior. As a result of the work, a software module was written in Python using the Giotto-tda topological analysis library, which implements the proposed method. The results of practical testing of the application of the methodology to the data of the system for monitoring the work of users of the corporate network are presented.