Security News > 2021 > February > Cybersecurity pros should switch from Indicators of Compromise to Indicators of Behavior
Fischbach and Alan Ross, chief architect at Forcepoint's X-Labs, champion a different solution: Indicators of Behavior.
"IOBs are behaviors that are monitored to understand risk within an organization," Ross said in his article Indicators of Behavior-With 2020 Vision.
"There are hundreds of Indicators of Behavior that we can observe and collect," Ross said.
"Once we collect the IOBs, we can put them together to spell out specific behaviors, personas, and business outcomes that may manifest from these behaviors."
The advantage of using IOBs is understanding users' history and behavior, which allows a judgment on whether the behavior should be allowed to continue or be altered.
Ross concluded: "IOBs present the best opportunity to provide adaptive trust by stopping the bad and allowing the good."