Identity Analytics: Analytics for Identity and Access Management

Misconfigured identities are the leading cause of cyber incidents. Organizations are investing significant resources to address these vulnerabilities, but these investments often prioritize meeting compliance requirements set by regulators. However, the controls and monitoring systems implemented are not designed for real-time threat detection and risk mitigation. Consequently, organizations often resort to purchasing multiple expensive vendor products, which then require extensive reconfiguration due to the varied identity landscapes of each organization.

In this book, we explore how individuals can construct their own identity analytics solution from scratch. We provide starter code to facilitate understanding, catering to beginners. This knowledge can also serve as guidance for those considering vendor products. The book commences with general principles and progresses to cover specific use cases, accompanied by sample code for each.

Much of the available material originates from vendors, which tends to focus more on marketing rather than addressing systemic issues. Alternatively, materials may solely concentrate on Identity and Access Management (IAM) processes and governance without delving deeply into the topics discussed here.

What You Will Learn:

• The relationship between IAM and Identity Analytics.
• Statistical methods, data curation processes, and risk scoring that contribute to effective IAM strategies.
• How to utilize advanced ML/AI techniques for implementing impactful IAM programs, including various use cases that demonstrate their effectiveness.

Who this book is for:

Software engineers specializing in IAM technologies are essential in every enterprise, regardless of size. Cyber analysts focus on insider threats and identity threat detection systems. Governance and risk associates handle compliance related to identity management systems. Data analysts, data scientists, and machine learning engineers are involved in deploying identity analytics systems. IAM and cyber executives and sponsors seek to understand the return on investment (ROI) of IAM investments. Engineers who are working on advanced initiatives such as GenAI, and zero trust.