What is z-score in SAP BC-ETD - SAP Enterprise Threat Detection?

SAP Term: z-score

• Component: BC-ETD

• Component Name: SAP Enterprise Threat Detection

• Description: From statistical analysis, for a data point, it is the number of standard deviations above or below the mean.

Smart SAP Assistant

• Key Concepts: 
  The z-score is a metric used in SAP Enterprise Threat Detection (BC-ETD) to measure the likelihood of a given event being malicious. It is calculated by taking the difference between the observed value and the expected value, divided by the standard deviation of the expected value. The higher the z-score, the more likely it is that the event is malicious. 
  
  How to use it: 
  The z-score can be used to identify suspicious activity in SAP systems. It can be used to detect anomalies in user behavior, such as unusual login attempts or data access patterns. It can also be used to detect malicious code or malware that has been injected into the system. 
  
  Tips & Tricks: 
  When using the z-score, it is important to set an appropriate threshold for what constitutes a suspicious event. This threshold should be based on the expected behavior of users and systems in order to ensure that only truly malicious events are flagged. 
  
  Related Information: 
  The z-score is just one of many metrics used in SAP Enterprise Threat Detection. Other metrics include anomaly scores, risk scores, and threat scores. These metrics can be used together to provide a comprehensive view of potential threats in an SAP system.