Abstract: The present invention is a website-based, Internet browser accessible method of behavior assessment that consists of a user within an organization accessing the website-hosted Workplace Behavior Observation Form (WBOF) through the Universal Resource Locator (URL) address for the site to answer all form items about an observed individual in the same workplace to determine when characteristics are identified indicating the presence of and predisposition to insider threat. When the WBOF is completed, the user completing the WBOF submits the form which then is automatically scored and analyzed by pattern classifiers trained using a multitude of past examples of known insider threat characteristics across all WBOF items as input which, in turn, provide outputs of threat and risk values that are embedded in a report template in designated locations to form a completed assessment of threat, organizational vulnerabilities, and risk to the organization. The completed report is forwarded to the user's email address.

Abstract: The present invention is a website-based, Internet browser accessible method of behavior assessment that consists of a user within an organization accessing the website-hosted Workplace Behavior Observation Form (WBOF) through the Universal Resource Locator (URL) address for the site to answer all form items about an observed individual in the same workplace to determine when characteristics are identified indicating the presence of and predisposition to insider threat. When the WBOF is completed, the user completing the WBOF submits the form which then is automatically scored and analyzed by pattern classifiers trained using a multitude of past examples of known insider threat characteristics across all WBOF items as input which, in turn, provide outputs of threat and risk values that are embedded in a report template in designated locations to form a completed assessment of threat, organizational vulnerabilities, and risk to the organization. The completed report is forwarded to the user's email address.

Abstract: The invention provides a method and system for monitoring a computer network and determining whether the network faces a threat from users. In the event that the existence of a threat is determined, the system in accordance with the invention provides a real-time assessment of the threat to the network and responds to prevent damage to the network.

Abstract: The invention provides a method and system for monitoring a computer network and determining whether the network faces a threat from users. In the event that the existence of a threat is determined, the system in accordance with the invention provides a real-time assessment of the threat to the network and responds to prevent damage to the network.