Patent ID: 8326987

Claim:
A method for a monitoring device to generate an auto-adaptive baseline model to profile behavior, applicable to monitoring activities of a plurality of members in a network data environment, said method comprising the steps of: creating, by a controller, a model based on five basic elements of who, what where, how, and when, the model being created by defining a plurality of members and a plurality of collective behavior variables, each member has a plurality of individual behavior variables, and defining conditions for each individual behavior variable and collective behavior variable; monitoring, through a monitoring port, member activities and, upon detecting an activity by a member, updating with the detected activity corresponding individual behavior variables and collective behavior variables stored in a storage unit, each individual behavior variable representing a combination information related to five basic elements, the collective behavior variables being defined as a function of a plurality of individual behavior variables; comparing, by the controller, the updated individual behavior variables and the collective behavior variables against associated conditions; if any condition is met, issuing an alert event, through an user interface, to notify designated personnel; upon receiving an alert event, the designated personnel decides whether to manually redefine the associated conditions or to ignore the alert event; and if the alert event is ignored, the associated conditions are automatically redefined by the processor.