Abstract: A cybersecurity system that protects against cyber attacks by performing user and device behavioral analysis using an advanced cyber decision platform which creates a map of users and devices attached to a network, develops a baseline of expected interactions and behaviors for each user and device in the map, and monitors deviations from the expected interactions and behaviors.

Abstract: A system for user and entity behavioral analysis using an advanced cyber decision platform is provided, comprising a grouping engine configured to create an interaction dataset based at least in part on interactions within a particular network, process the interaction to generate an interaction map, and create a plurality of groups based at least in part by the interaction map; a behavioral analysis engine configured to create a network-usage dataset, and process the network-usage dataset to generate a behavioral baseline for each group; and a monitoring service configured to continuously monitor each group for anomalous network behavior.