METHOD FOR ADAPTIVELY BUILDING A BASELINE BEHAVIOR MODEL

A method for generating an auto-adaptive baseline model for profiling the individual and collective behavior of a plurality of users in a network is provided. The method comprises the steps of creating a model, defining a plurality of members and a plurality of collective variables, each member corresponding to a user, and including a plurality of individual variables, defining conditions for each collective variable and individual variable, upon detecting an activity by a user, updating corresponding individual variables and collective variables, comparing updated individual variables and collective variables against corresponding conditions. If condition is met, an alert event is issued to notify designated personnel; otherwise, returning to the step of upon detecting activity. Finally, upon receiving an alert event, the designated personnel decides whether to manually redefine the conditions or to ignore the alert event. If the alert event is ignored, said conditions are automatically redefined in accordance with system defined mechanism.