CogniSafe utilizes semantic technology in a highly efficient and low-signature agent capable of detecting and classifying different kinds of events and patterns (fixed andmutation) during their occurrence and within their respective contexts (e.g. space, time, user-habits, and host-habits). Using asemantic or ontological approach, CogniSafe canprovide a fast and easily extendible continuous user authentication solution by defining a set of maps or cognitive schemes that will instruct the CogniSafe engine (in the form of an end-point agent) to learn user habits and behaviors, based on keyboard and mouse dexterity, with a per process orper time-of-day context. The agent then learns and constructs a profile of the authorized user and can, upon reaching statistical points of maturity for different parameters, detect unauthorized users gaining access to the end-point.