Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ ZENODOarrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Article . 2025
License: CC BY
Data sources: ZENODO
ZENODO
Article . 2025
License: CC BY
Data sources: Datacite
ZENODO
Article . 2025
License: CC BY
Data sources: Datacite
versions View all 2 versions
addClaim

UEBA-Integrated Data Warehouse Architecture for Advanced Threat Detection in DAM Systems

Authors: Chandrashekar Reddy Aare;

UEBA-Integrated Data Warehouse Architecture for Advanced Threat Detection in DAM Systems

Abstract

This article presents a centralized data warehousing solution for Database Activity Monitoring (DAM) and Database Audit Systems (DAS) with integrated User and Entity Behavior Analytics (UEBA) capabilities. The architecture addresses the critical challenges of modern cybersecurity environments where traditional rule-based detection systems prove insufficient against sophisticated threats and insider attacks. By combining advanced ETL processes, machine learning-based anomaly detection, and multi-tiered storage strategies, the architecture enables organizations to identify abnormal database activities that deviate from established behavioral baselines. The ETL framework implements selective capture mechanisms and parallel processing techniques to efficiently handle massive volumes of sensitive data while maintaining performance and data quality. The UEBA integration establishes multi-dimensional behavioral baselines through unsupervised learning algorithms and employs an ensemble of detection methods, including Statistical Process Control, Isolation Forest, and LSTM networks. Architectural decisions around data partitioning and storage tiers optimize both performance and governance, while comprehensive High Availability and Disaster Recovery strategies ensure continuous operation and regulatory compliance. Performance metrics demonstrate significant improvements in threat detection accuracy, reduced false positives, and faster response times compared to traditional approaches. The architecture offers a blueprint for organizations seeking to enhance database security through behavioral analytics while maintaining compliance with HIPAA, GDPR, and PCI-DSS requirements.

Related Organizations
  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    0
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
0
Average
Average
Average
Green