That's true, so you have to manage those false positives with other data points.
A. How often do we see this user using multiple machines on the same day?
B. Is access being made from two different machines at the same time (very high indicator of license sharing)
At the end of the day no matter how much data you add to the equation, you are still dealing in probabilities. So as a business you must be careful about when and who you accuse of license violations.
A. How often do we see this user using multiple machines on the same day? B. Is access being made from two different machines at the same time (very high indicator of license sharing)
At the end of the day no matter how much data you add to the equation, you are still dealing in probabilities. So as a business you must be careful about when and who you accuse of license violations.