CPC G06F 21/6218 (2013.01) [G06F 21/554 (2013.01); G06N 3/04 (2013.01); G06N 3/084 (2013.01); H04L 63/0861 (2013.01); H04L 63/14 (2013.01); G06Q 50/265 (2013.01)] | 20 Claims |
1. A method of updating a mitigation policy of an identity access management system, the method comprising:
receiving transaction data relating to a transaction for an authorized user account;
determining a transaction type of the transaction based on the transaction data;
identifying an abnormality associated with the transaction based on the transaction data using a machine learning model trained with user data;
determining a threat level associated with the transaction based on the transaction data and the transaction type;
responsive to identifying the abnormality, determining a mitigation procedure from the mitigation policy based on the transaction type of the transaction and the threat level associated with the transaction;
applying the mitigation procedure to the transaction based on the transaction type;
storing the transaction data, an indication of the mitigation procedure, and an indication of the threat level associated with the transaction in a transaction data store; and
updating the mitigation policy based on the transaction data and the transaction type of the transaction.
|