专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20230137325A1 ATTACK MEANS EVALUATION APPARATUS, ATTACK MEANS EVALUATION METHOD, AND COMPUTER READABLE MEDIUM 有权
公开(公告)号：US20230137325A1
公开(公告)日：2023-05-04
申请号：US18088453
申请日：2022-12-23
申请人： Mitsubishi Electric Corporation
发明人： Keisuke KITO , Kiyoto KAWAUCHI
IPC分类号： G06F21/55
摘要： An attack means evaluation apparatus (100) evaluates an attack means used in a cyberattack. A score value calculation unit (110) obtains a plurality of attack means, and for each attack means of the plurality of attack means, calculates a score value that shows validity of an attack on an attack target system. A means selection unit (120) selects an attack means that is valid as an attack on the attack target system from the plurality of attack means using the score value of each attack means of the plurality of attack means and a threshold (173). A means execution unit (130) executes the attack means that is selected on the attack target system, and verifies whether or not an attack for achieving a final aim of the cyberattack is possible based an execution result of the attack means that is selected.

2. 发明授权

US11640461B2 Secure runtime for virtual machines 有权
公开(公告)号：US11640461B2
公开(公告)日：2023-05-02
申请号：US16811109
申请日：2020-03-06
申请人： Rubrik, Inc.
发明人： Abhay Mitra , Vijay Karthik , Vivek Sanjay Jain , Avishek Ganguli , Arohi Kumar , Kushaagra Goyal , Christopher Wong
IPC分类号： G06F9/455 , G06F21/55 , G06F11/14 , G06F9/54
摘要： A computer-implemented method at a data management system comprises: generating, with one or more processors, a containerized runtime in a memory in communication with the one or more processors; instantiating, with the one or more processors, an app in the runtime; receiving, with the one or more processors, a request from the app for data; retrieving, with the one or more processors, a copy of the requested data from a data source; and transmitting, with the one or more processors, the data to the containerized runtime for the app to operate on.

3. 发明授权

US11640459B2 Abnormality detection device 有权
公开(公告)号：US11640459B2
公开(公告)日：2023-05-02
申请号：US17255518
申请日：2018-06-28
申请人： NEC Corporation
发明人： Takehiko Mizoguchi
IPC分类号： G06F21/55 , G06F21/54 , G06F21/56
摘要： A first anomaly detection unit detects anomalous first monitored data from among a plurality of first monitored data obtained from a monitored system. A second anomaly detection unit operates in parallel with the first anomaly detection unit and detects anomalous second monitored data from among a plurality of second monitored data obtained from the monitored system. In a first storage unit, the anomalous first monitored data and the anomalous second monitored data detected before lapse of a given time from detection time of the anomalous first monitored data are stored in association with each other. A first determination unit, when the anomalous first monitored data is detected, retrieves the anomalous second monitored data associated with the detected anomalous first monitored data from the first storage unit and outputs a first anomaly detection result including the retrieved anomalous second monitored data and the detected anomalous first monitored data.

4. 发明申请

US20230129786A1 CORRELATING ENDPOINT AND NETWORK VIEWS TO IDENTIFY EVASIVE APPLICATIONS 有权
公开(公告)号：US20230129786A1
公开(公告)日：2023-04-27
申请号：US18088284
申请日：2022-12-23
申请人： Cisco Technology, Inc.
发明人： Blake Harrell Anderson , David McGrew , Vincent E. Parla , Jan Jusko , Martin Grill , Martin Vejman
IPC分类号： H04L9/40 , G06F21/55 , H04L9/32 , G06F21/44 , G06F21/52
摘要： In one embodiment, a service receives traffic telemetry data regarding encrypted traffic sent by an endpoint device in a network. The service analyzes the traffic telemetry data to infer characteristics of an application on the endpoint device that generated the encrypted traffic. The service receives, from a monitoring agent on the endpoint device, application telemetry data regarding the application. The service determines that the application is evasive malware based on the characteristics of the application inferred from the traffic telemetry data and on the application telemetry data received from the monitoring agent on the endpoint device. The service initiates performance of a mitigation action in the network, after determining that the application on the endpoint device is evasive malware.

5. 发明授权

US11637855B2 Systems and methods for managing cyber vulnerabilities 有权
公开(公告)号：US11637855B2
公开(公告)日：2023-04-25
申请号：US17657972
申请日：2022-04-05
申请人： Orca Security LTD.
发明人： Avi Shua
IPC分类号： H04L9/40 , G06F9/455 , H04L67/1008 , H04L67/101 , G06F9/50 , G06F21/54 , G06F21/55 , G06F21/56 , G06F21/78 , G06F21/57 , H04L9/08 , H04L9/14
摘要： Systems, methods, and computer-readable media are provided for securing cloud infrastructure, including a method comprising: establishing a trusted relationship between a source account in a cloud environment and a scanner account, using the established trust relationship, utilizing at least one cloud provider API to identify workloads in the source account, using the at least one cloud provider API to query a geographical location of at least one of the identified workloads, receiving an identification of the geographic location, using the cloud provider APIs to access block storage volumes of the at least one workload, determining a file-system of the at least one workload, mounting the block storage volumes on a scanner based on the determined file-system, activating a scanner at the geographic location, reconstructing from the block storage volumes a state of the workload, and assessing the reconstructed state of the workload to extract insights.

6. 发明授权

US11636200B2 System and method for remotely detecting an anomaly 有权
公开(公告)号：US11636200B2
公开(公告)日：2023-04-25
申请号：US16004571
申请日：2018-06-11
申请人： Palo Alto Research Center Incorporated
发明人： George Daniel , Alexander Feldman , Bhaskar Saha , Anurag Ganguli , Bernard D. Casse , Johan de Kleer , Shantanu Rane , Ion Matei
IPC分类号： G06F21/55 , G06N20/00
摘要： The following relates generally to defense mechanisms and security systems. Broadly, systems and methods are disclosed that detect an anomaly in an Embedded Mission Specific Device (EMSD). Disclosed approaches include a meta-material antenna configured to receive a radio frequency signal from the EMSD, and a central reader configured to receive a signal from the meta-material antenna. The central reader may be configured to: build a finite state machine model of the EMSD based on the signal received from the meta-material antenna; and detect if an anomaly exists in the EMSD based on the built finite state machine model.

7. 发明授权

US11636003B2 Technology for logging levels and transaction log files 有权
公开(公告)号：US11636003B2
公开(公告)日：2023-04-25
申请号：US17363212
申请日：2021-06-30
申请人： International Business Machines Corporation
发明人： Raghuveer Prasad Nagar , Jagadesh Ramaswamy Hulugundi , Abhishek Solanki , Subba Rayudu Tangirala
IPC分类号： G06F11/00 , G06F11/07 , G06F21/55 , G06N20/20
摘要： Dynamic logging includes generating parsed event data by at least one natural language processor responsive to event data of a log for transactions of a target application. In response to the parsed event data, a first classifier classifies context states of the respective transactions of the target application. In response, a second classifier classifies trouble prone states of the respective transactions, wherein the trouble prone states are for respective hierarchical levels. When a logic module determines, for a current one of the trouble prone states for a current transaction, that the current trouble prone state is a higher trouble prone level than for a transaction immediately preceding the current transaction, the logic module sends an increased log detail selection to the target application, so that a greater amount of log detail is logged for at least a next transaction after the current transaction.

8. 发明申请

US20230124621A1 SYSTEMS AND METHODS FOR ACCELERED DETECTION AND REPLACEMENT OF ANOMALOUS MACHINE LEARNING-BASED DIGITAL THREAT SCORING ENSEMBLES AND INTELLIGENT GENERATION OF ANOMALOUS ARTIFACTS FOR ANOMALOUS ENSEMBLES 有权
公开(公告)号：US20230124621A1
公开(公告)日：2023-04-20
申请号：US17963365
申请日：2022-10-11
申请人： Sift Science, Inc.
发明人： Pradhan Bagur Umesh , Yuan Zhuang , Hui Wang , Nicholas Benavides , Chang Liu , Yanqing Bao , Wei Liu
IPC分类号： G06F21/55 , G06N5/04 , G06N20/20
摘要： A system and method for accelerated anomaly detection and replacement of an anomaly-experiencing machine learning-based ensemble includes identifying a machine learning-based digital threat scoring ensemble having an anomalous drift behavior in digital threat score inferences computed by the machine learning-based digital threat scoring ensemble for a target period; executing a tiered anomaly evaluation for the machine learning-based digital threat scoring ensemble that includes identifying at least one errant machine learning-based model of the machine learning-based digital threat scoring ensemble contributing to the anomalous drift behavior, and identifying at least one errant feature variable of the at least one machine learning-based model contributing to the anomalous drift behavior; generating a successor machine learning-based digital threat scoring ensemble to the machine learning-based digital threat scoring ensemble based on the tiered anomaly evaluation; and replacing the machine learning-based digital threat scoring ensemble with the successor machine learning-based digital threat scoring ensemble.

9. 发明申请

US20230124144A1 SECURITY MANAGEMENT SYSTEM AND SECURITY MANAGEMENT METHOD 有权
公开(公告)号：US20230124144A1
公开(公告)日：2023-04-20
申请号：US18047776
申请日：2022-10-19
申请人： Hitachi, Ltd.
发明人： Mayuko Tanaka
IPC分类号： G06F21/55
摘要： In a security management system, communication paths used for communication between business devices constituting a monitoring target system and a business communication importance which is information indicating an importance of each of the communication paths are stored, communication performed in the monitoring target system is monitored, when unauthorized communication performed in the monitoring target system is detected, a communication path used for the unauthorized communication is specified, and an influence range of the unauthorized communication on the monitoring target system is specified based on the specified communication path, the communication path having a possibility of being influenced when the countermeasure is implemented is specified, an influence value which is an index indicating a degree of influence of the countermeasure on the business is obtained, and whether or not to automatically implement the countermeasure is determined based on the influence value.

10. 发明申请

US20230124113A1 METHOD AND SYSTEM FOR IDENTIFYING SUSPICIOUS CODE CONTRIBUTION TO A SOURCE CODE REPOSITORY 有权
公开(公告)号：US20230124113A1
公开(公告)日：2023-04-20
申请号：US17503803
申请日：2021-10-18
申请人： HCL America, Inc
发明人： Michael Hudson , Michael Florio , Sunil Dandamudi , Samuel Dwumfour
IPC分类号： G06F8/75 , G06F8/71 , G06F21/55 , G06F21/56 , G06F11/34
摘要： This disclosure relates to method and system for identifying suspicious code contribution of a user to a source code repository. The method includes receiving a plurality of updated code files of a source code repository from a user through an event. The method further includes extracting a plurality of user action parameters from the event corresponding to each of the plurality of updated code files. The method further includes storing the plurality of updated code files and the plurality of user action parameters from the event corresponding to each of the plurality of updated code files in a database. The method further includes identifying at least one of the set of user actions as a suspicious code contribution of the user for at least one of the plurality of updated code files of the source code based on the plurality of user action parameters.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式