Practical approach for measuring the level of user behaviour

User behaviours danger the operation of an organization much more than technical vulnerabilities do. Technical solutions exist against attacks that tend to exploit technical security holes. The technical part of the IT security is well-grown, however dealing with the human factor is still in its infancy. In this paper possible methods for user behaviour assessments are discussed. As the paper is an abstract, the presentation will focus on some useful possibilities for assessing user behaviour measurements. The input sources for our analysis are user activities and actions gathered for example, from the workstation used by the particular user, network traffic and application logs, especially logs from protection controls such as anti-virus, firewalls etc. Using these input sources, a couple of very useful metrics can be defined for the user classification as well. Once we can measure the level of the user behaviour, we can use it for improving the IT security at the given organization. The contributions of this abstract paper include: a. Introduction to handling the user behaviour (measurement and action), b. Outline of some useful tools for automatically measuring aa couple of fundamental signals related to the users' behaviour, c. A simple example to calculate metrics from measured signals, d. Meanings of the metrics.