How does app anomaly detection work?

As a user uses the

BlackBerry Dynamics

apps, the apps send behavioral data and events to the

Persona

services, including the user’s typical physical interactions with the app (scrolling, swiping, and so on) and frequently used device and app features (copy, screen shot, reply all, and so on).

The services use this information to train and develop a reliable usage model for the user based on established patterns of activity. The model is dynamic and based on the user’s last 30 days of activity (you can change the data retention period). It can take some time to create a user’s initial model as the services collect sufficient data.

If a

BlackBerry Dynamics

app reports behavior or app events that do not fit a user’s established model,

BlackBerry Persona

immediately triggers an action that you specify in a policy. For example, you can apply a

BlackBerry Dynamics

override profile or block the app that the behavior was detected in.

This response to anomalous use is a direct and immediate way to protect users from malicious attempts to access valuable work data.