Ping Identity PingOne Risk Management
Ping Identity PingOne Risk Management is a cloud service that was released in October and uses machine learning to evaluate risk signals and detect threats in real time. It evaluates user context and multiple signals to understand the level of risk posed by a user attempting to access a particular resource.
The service uses machine learning models that learn past user login behavior so that the organization can detect anomalous behavior and assign a level of risk. PingOne Risk Management can also detect if an IP address is associated with an unknown VPN, TOR or proxy, which increases the probability of malicious behavior.
PingOne Risk Management additionally calculates if the time between the current login location and the previous location is physically possible via travel, and flags the login as presumptive suspicious activity if not. The service also evaluates IP addresses to determine if they were previously used in malicious activity.