Measuring the characteristics of expected activity so that changes to it can be more easily identified.
Source(s):
NIST SP 800-61 Rev. 2
under Profiling
CNSSI 4009-2015
[Superseded]
from
NIST SP 800-61 Rev. 2