专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09894069B2 Method and system for automatically managing secret application and maintenance 有权
公开(公告)号：US09894069B2
公开(公告)日：2018-02-13
申请号：US14069921
申请日：2013-11-01
申请人： Intuit Inc.
发明人： Brett Weaver , Sabu Kuruvila Philip , Troy Otillio , Jinglei Whitehouse, III , Oleg Gryb , Jeffrey M. Wolfe , Ankur Jain , M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： H04L9/08 , H04L29/06 , G06F21/10
CPC分类号： H04L63/10 , G06F21/10 , G06F21/6218 , H04L9/0838 , H04L63/0457 , H04L63/0815 , H04L2209/76
摘要： Secret application and maintenance policy data is generated for different classes of data. The class of data to be protected is determined and the secret application and maintenance policy data for the determined class of the data to be protected is identified and obtained. Required secrets data representing one or more secrets to be applied to the data to be protected is obtained and then automatically scheduled for application to the data to be protected in accordance with the secret application and maintenance policy data for the determined class of the data to be protected. Maintenance of the one or more secrets is also automatically scheduled in accordance with the secret application and maintenance policy data for the determined class of the data to be protected.

2. 发明申请

US20180007048A1 METHOD AND SYSTEM FOR AUTOMATICALLY MANAGING SECRET APPLICATION AND MAINTENANCE 有权
公开(公告)号：US20180007048A1
公开(公告)日：2018-01-04
申请号：US14069921
申请日：2013-11-01
申请人： Intuit Inc.
发明人： Brett Weaver , Sabu Kuruvila Philip , Troy Otillio , Jinglei Whitehouse , Oleg Gryb , Jeffrey M. Wolfe , Ankur Jain , M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： H04L29/06 , H04L9/08 , G06F21/10
CPC分类号： H04L63/10 , G06F21/10 , G06F21/6218 , H04L9/0838 , H04L63/0457 , H04L63/0815 , H04L2209/76
摘要： Secret application and maintenance policy data is generated for different classes of data. The class of data to be protected is determined and the secret application and maintenance policy data for the determined class of the data to be protected is identified and obtained. Required secrets data representing one or more secrets to be applied to the data to be protected is obtained and then automatically scheduled for application to the data to be protected in accordance with the secret application and maintenance policy data for the determined class of the data to be protected. Maintenance of the one or more secrets is also automatically scheduled in accordance with the secret application and maintenance policy data for the determined class of the data to be protected.

3. 发明授权

US09742794B2 Method and apparatus for automating threat model generation and pattern identification 有权
公开(公告)号：US09742794B2
公开(公告)日：2017-08-22
申请号：US15086330
申请日：2016-03-31
申请人： Intuit Inc.
发明人： Luis Felipe Cabrera , M. Shannon Lietz , Javier Godinez
IPC分类号： H04L29/06 , G06F21/57
CPC分类号： H04L63/1433 , G06F21/577 , H04L63/1425
摘要： A method and system for automating threat model generation and pattern identification for an application includes identifying components of an application, and receiving security information that identifies whether security measures were implemented within the application to secure the application against security threats. The method further receives an identification of external events, and receiving first patterns from one or more first virtual assets. A database is populated with the first patterns and the external events and then second patterns are received and compared to the first patterns. The method and system include distributing the identification of the one of the external events to the one or more second virtual assets, if the second patterns are similar to the first patterns, according to one embodiment.

4. 发明申请

US20170237756A1 SYSTEM AND METHOD FOR PROVIDING A SELF-MONITORING, SELF-REPORTING, AND SELF-REPAIRING VIRTUAL ASSET CONFIGURED FOR EXTRUSION AND INTRUSION DETECTION AND THREAT SCORING IN A CLOUD COMPUTING ENVIRONMENT 审中-公开
公开(公告)号：US20170237756A1
公开(公告)日：2017-08-17
申请号：US15581835
申请日：2017-04-28
申请人： Intuit Inc.
发明人： M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： H04L29/06
CPC分类号： G06F9/45558 , G06F21/50 , G06F21/55 , G06F2009/45591 , G06F2009/45595 , H04L41/0886 , H04L41/5025 , H04L41/5032 , H04L41/5096 , H04L63/14 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1433
摘要： A trigger event monitoring system is provided in one or more virtual assets. One or more trigger parameters, including security threat patterns, are defined and trigger data is generated. The one or more trigger monitoring systems are used to monitor extrusion and intrusion capabilities and self-monitored trigger events that may harm or otherwise leave a virtual asset in a vulnerable state. In one embodiment, trigger events and monitoring of at least a portion of message traffic sent to, or sent from, the one or more virtual assets are initiated and/or performed to detect any message including one or more of the one or more of the trigger parameters. Any message meeting the one or more trigger parameters is identified as a potential security threat and is assigned a threat score, which is provided to the virtual asset. Various corrective actions may take place.

5. 发明申请

US20160371178A1 METHOD AND SYSTEM FOR TESTING CLOUD BASED APPLICATIONS IN A PRODUCTION ENVIRONMENT USING FABRICATED USER DATA 审中-公开
公开(公告)号：US20160371178A1
公开(公告)日：2016-12-22
申请号：US15253226
申请日：2016-08-31
申请人： Intuit Inc.
发明人： Thomas Bishop , Javier Godinez , Capen Brinkley , Brett Weaver , M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： G06F11/36
CPC分类号： G06F11/3688 , G06F11/3664 , G06F11/3684 , G06F11/3692
摘要： An application is implemented in the production environment in which the application will be used. Fabricated user data associated with the application implemented in the production environment is then generated and provided to the application as implemented in the production environment. The fabricated user data is then processed by the application in the production environment to transform the fabricated user data into fabricated user results data. In one embodiment, the fabricated user results data is then analyzed to evaluate the production environment and/or operation of the application in the production environment.

6. 发明授权

US09501345B1 Method and system for creating enriched log data 有权
标题翻译：用于创建丰富的日志数据的方法和系统
公开(公告)号：US09501345B1
公开(公告)日：2016-11-22
申请号：US14139449
申请日：2013-12-23
申请人： Intuit Inc.
发明人： M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： G06F11/00 , G06F11/07 , G06F11/30
CPC分类号： G06F11/0784 , G06F11/0709 , G06F11/079 , G06F11/301 , G06F17/30 , G06F17/40
摘要： Access to first log data from a first log data source and second log data from a second log data source is obtained. Trigger event log data is defined and the second log data from the second log data source is monitored to detect the defined trigger event log data in the second log data. If the defined trigger event log data is detected in the second log data from the second log data source, the detected trigger event log data in the second log data from the second log data source is correlated with the first log data from the first log data source, and/or at least part of the second log data from the second log data source is inserted into the first log data from the first log data source.
摘要翻译：获得来自第一个日志数据源的第一个日志数据和来自第二个日志数据源的第二个日志数据。定义触发事件日志数据，并监视来自第二个日志数据源的第二个日志数据，以检测第二个日志数据中定义的触发事件日志数据。如果在来自第二日志数据源的第二日志数据中检测到定义的触发事件日志数据，则来自第二日志数据源的第二日志数据中检测到的触发事件日志数据与来自第一日志数据的第一日志数据相关源和/或来自第二日志数据源的第二日志数据的至少一部分从第一日志数据源插入到第一日志数据中。

7. 发明授权

US09473481B2 Method and system for providing a virtual asset perimeter 有权
标题翻译：提供虚拟资产周边的方法和系统
公开(公告)号：US09473481B2
公开(公告)日：2016-10-18
申请号：US14448281
申请日：2014-07-31
申请人： Intuit Inc.
发明人： M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： H04L29/06 , G06F21/53 , G06F21/56
CPC分类号： H04L63/08 , G06F21/53 , G06F21/56 , H04L63/10 , H04L63/104 , H04L63/1408 , H04L63/1433 , H04L63/20
摘要： A system and method provides a virtual perimeter by maintaining a data structure for identifying a first plurality of assets, according to one embodiment. The system and method provides services to a second of the first plurality of assets, at least partially based on identifiers for the first plurality of assets and at least partially based on a first role assigned to a first of the first plurality of assets, according to one embodiment. The system and method include admitting one of a second plurality of assets into the virtual perimeter if characteristics of the one of the second plurality of assets satisfy criteria for admission to the virtual perimeter, according to on embodiment.
摘要翻译：根据一个实施例，系统和方法通过维护用于识别第一多个资产的数据结构来提供虚拟周界。所述系统和方法至少部分地基于所述第一多个资产的标识符提供服务，并且至少部分地基于分配给所述第一多个资产中的第一个资产的第一角色，根据一个实施例。根据实施例，系统和方法包括将第二多个资产中的一个资产接纳到虚拟周边中，如果第二多个资产中的一个资产的特征满足准入虚拟周界的准则。

8. 发明申请

US20160248798A1 METHOD AND APPARATUS FOR AUTOMATING THREAT MODEL GENERATION AND PATTERN IDENTIFICATION 有权
标题翻译：自动化模型生成和模式识别的方法和装置
公开(公告)号：US20160248798A1
公开(公告)日：2016-08-25
申请号：US15086330
申请日：2016-03-31
申请人： Intuit Inc.
发明人： Luis Felipe Cabrera , M. Shannon Lietz , Javier Godinez
IPC分类号： H04L29/06
CPC分类号： H04L63/1433 , G06F21/577 , H04L63/1425
摘要： A method and system for automating threat model generation and pattern identification for an application includes identifying components of an application, and receiving security information that identifies whether security measures were implemented within the application to secure the application against security threats. The method further receives an identification of external events, and receiving first patterns from one or more first virtual assets. A database is populated with the first patterns and the external events and then second patterns are received and compared to the first patterns. The method and system include distributing the identification of the one of the external events to the one or more second virtual assets, if the second patterns are similar to the first patterns, according to one embodiment.
摘要翻译：用于自动化应用的威胁模型生成和模式识别的方法和系统包括识别应用的组件，以及接收安全信息，该安全信息标识在应用程序内是否实施安全措施以保护应用免受安全威胁。该方法还接收外部事件的标识，以及从一个或多个第一虚拟资产接收第一模式。数据库填充有第一模式和外部事件，然后接收第二模式并与第一模式进行比较。根据一个实施例，如果第二图案类似于第一图案，则该方法和系统包括将外部事件之一的识别分配给一个或多个第二虚拟资产。

9. 发明授权

US09374389B2 Method and system for ensuring an application conforms with security and regulatory controls prior to deployment 有权
标题翻译：在部署之前，确保应用程序符合安全和监管控制的方法和系统
公开(公告)号：US09374389B2
公开(公告)日：2016-06-21
申请号：US14261621
申请日：2014-04-25
申请人： Intuit Inc.
发明人： Thomas Bishop , Brett Weaver , Christian Price , Javier Godinez , Capen Brinkley , M. Shannon Lietz , Luis Felipe Cabrera
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L41/5009 , H04L41/5096
摘要： Asset security compliance data ensuring defined asset security policies are applied to the creation and/or operation of assets to be used to implement an application and application deployment security compliance data for ensuring compliance with one or more application deployment security policies associated with the deployment of assets used to implement the application is generated. The asset security compliance data is then used to ensure each asset used to implement the application is created and used in compliance with asset security policies and the application deployment security compliance data is used to ensure that each asset used to implement the application is deployed in compliance with the application deployment security policies.
摘要翻译：确保定义的资产安全策略的资产安全合规性数据应用于用于实施应用程序和应用程序部署安全合规性数据的资产的创建和/或操作，以确保符合与部署资产相关联的一个或多个应用程序部署安全策略用于实现应用程序生成。然后使用资产安全合规性数据确保用于实施应用程序的每个资产都是按照资产安全策略创建和使用的，并且应用程序部署安全合规性数据用于确保用于实施应用程序的每个资产都按照规定进行部署与应用部署安全策略。

10. 发明授权

US09319415B2 Method and system for providing reference architecture pattern-based permissions management 有权
标题翻译：提供参考架构模式的权限管理的方法和系统
公开(公告)号：US09319415B2
公开(公告)日：2016-04-19
申请号：US14266107
申请日：2014-04-30
申请人： Intuit Inc.
发明人： M. Shannon Lietz , Luis Felipe Cabrera , Christian Price , Michelle Nikulshin , Javier Godinez , Sabu Kuruvila Philip , Brad A. Rambur , Scott Cruickshanks Kennedy , Erik Thomas Naugle
IPC分类号： H04L29/06
CPC分类号： H04L63/105 , G06F21/604 , G06F2221/2141 , H04L63/101 , H04L63/102 , H04L67/00
摘要： Reference architecture pattern role data representing reference architecture pattern roles to be associated with entities taking part in the development, and/or deployment, and/or operation of an application is generated. Reference architecture pattern tier data representing reference architecture pattern tiers used to create, and/or deploy, and/or operate an application using the reference architecture pattern is generated. For each reference architecture pattern role at least one access and/or operational permission is associated with each reference architecture pattern tier. At least one entity is assigned one of the reference architecture pattern roles and for each reference architecture pattern tier, the at least one entity is automatically provided the at least one access and/or operational permission associated with the reference architecture pattern role assigned to the entity.
摘要翻译：生成表示与参与开发，/或部署和/或应用程序的实体相关联的参考架构模式角色的参考架构模式角色数据。生成用于使用参考架构模式来创建和/或部署和/或操作应用的参考架构模式层数据。对于每个参考架构模式角色，至少一个访问和/或操作权限与每个参考架构模式层相关联。至少一个实体被分配了参考架构模式角色之一，并且对于每个参考架构模式层，至少一个实体被自动提供与分配给该实体的参考架构模式角色相关联的至少一个访问和/或操作许可。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式