Patent Document ID: 9117076
Application ID: 13829613
Patent Flag: 1

Claim One:
1. A method for monitoring a data network and identifying potentially malicious or threatening cyber activity, comprising: monitoring and collecting digital hidrosis data from at least one host system, wherein the digital hidrosis data comprises data associated with predetermined system and user-based behavioral indicators that provide information regarding a user's behavior, wherein the predetermined system and user-based behavioral indicators comprise at least one indicator that is not associated with autonomous application-initiated activity; comparing the digital hidrosis data with reference digital hidrosis data, wherein the reference digital hidrosis data defines normal values and/or a normal range of values for the predetermined system and user-based behavioral indicators that are indicative of non-malicious activity by a user; and determining whether malicious or threatening cyber activity may be present based on the comparison between the digital hidrosis data and the reference digital hidrosis data.