OAAM Predictive Analysis Oracle Fusion Middleware Online Documentation Library

11-16 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager Figure 11–9 Auto-learning Pattern-Based Policy: OAAM Users vs. Themselves Flow

11.5.3.4.3 OAAM Users vs. Themselves: Details of Rules

OAAM Security and Autolearning Policies 11-17 Table 11–15 Auto-learning Pattern-Based Policy Rules Details: OAAM Users vs. Themselves Rule Rule Condition and Parameters Results ISP ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 6 Pattern name for membership = User: ISP profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: ISP Score = 600 Connection type ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 6 Pattern name for membership = User: ASN profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: connection type Score = 600 Routing type ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 6 Pattern name for membership = User: Routing type profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: Routing type Score = 600 Device ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 10 Pattern name for membership = User: Device profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: Device Score = 700 Day of the week ENTITY: Entity is member of pattern bucket for first time in certain time period Pattern name for membership = User: Day of Week profiling pattern Is ConditionTrue = True Time period type for pattern membership = Months Time period for pattern membership = 3 Member type for pattern membership = User First time count = 1 Action = OAAM Challenge Alert = OAAM User: day of the week Score = 500 11-18 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager

11.5.3.4.4 OAAM Users vs. Themselves: Trigger Combinations

None

11.5.3.5 Autolearning Pattern-Based Policy: OAAM Users vs. All Users

If a user does not have a sufficient amount of historical data captured this policy is used to evaluate his current behavior against the historical behavior of all other users. This policy uses pattern-based rules to evaluate risk.

11.5.3.5.1 OAAM Users vs. All Users Policy Summary

Country and State ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 10 Pattern name for membership = User: State profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: state Score = 600 Time of Day ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 3 Pattern name for membership = User: timerange profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: time of day Score = 500 ASN ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 6 Pattern name for membership = User: ASN profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 1 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: ASN Score = 600 Country ENTITY: Entity is member of pattern less than some percent times Pattern Hit Percent less than = 20 Pattern name for membership = User: Country profiling pattern Is Membership Count Less than patternHitPercent = True Time period type for pattern membership = Months Time period for pattern membership = 3 Member type for pattern membership = User Action = OAAM Challenge Alert = OAAM User: Country Score = 700 Table 11–15 Cont. Auto-learning Pattern-Based Policy Rules Details: OAAM Users vs. Themselves Rule Rule Condition and Parameters Results