Skip to content

Glossary: Passwords, Automation and AI in Security Operations

anomaly detection

Automatically comparing activity with a baseline of normal and raising an alert, with a reason, when something falls outside it. It is a behavior-based (heuristic) method, unlike signature detection, which looks for known bad patterns.

Where the book teaches it

Related terms

baselineanomalysignature detectionheuristic detectionimpossible travelAI-augmented baseline