System and method to anonymize data transmitted to a destination computing device
    1.
    发明授权
    System and method to anonymize data transmitted to a destination computing device 有权
    用于对发送到目的地计算设备的数据进行匿名化的系统和方法

    公开(公告)号:US09292696B1

    公开(公告)日:2016-03-22

    申请号:US13843925

    申请日:2013-03-15

    IPC分类号: G06F21/60

    摘要: A method and system for anonymizing data to be transmitted to a destination computing device is disclosed. Data to be transmitted is received from a user computer. The data includes a plurality of fields of data. One or more fields of data are selected for anonymization. The selected one or more fields are anonymized. The data with one or more fields anonymized is transmitted to the destination computing device.

    摘要翻译: 公开了一种用于将要发送到目的地计算设备的数据进行匿名化的方法和系统。 从用户计算机接收要发送的数据。 数据包括多个数据字段。 选择一个或多个数据字段进行匿名化。 所选的一个或多个字段是匿名的。 具有一个或多个匿名字段的数据被发送到目的地计算设备。

    System and method to anonymize data transmitted to a destination computing device
    2.
    发明授权
    System and method to anonymize data transmitted to a destination computing device 有权
    用于对发送到目的地计算设备的数据进行匿名化的系统和方法

    公开(公告)号:US08694646B1

    公开(公告)日:2014-04-08

    申请号:US13042459

    申请日:2011-03-08

    IPC分类号: G06F15/16

    摘要: A method and system for anonymizing data to be transmitted to a destination computing device is disclosed. Anonymization strategy for data anonymization is provided. Data to be transmitted is received from a user computer. Selective anonymization of the data is performed, based on the anonymization strategy, using an anonymization module. Anonymized data is transmitted to the destination computing device over a network.

    摘要翻译: 公开了一种用于将要发送到目的地计算设备的数据进行匿名化的方法和系统。 提供数据匿名化的匿名化策略。 从用户计算机接收要发送的数据。 基于匿名化策略,使用匿名化模块来执行数据的选择性匿名化。 匿名数据通过网络传输到目标计算设备。

    Security event aggregation at software agent
    3.
    发明授权
    Security event aggregation at software agent 有权
    软件代理的安全事件聚合

    公开(公告)号:US07644438B1

    公开(公告)日:2010-01-05

    申请号:US10975962

    申请日:2004-10-27

    IPC分类号: G08B23/00

    CPC分类号: H04L63/0218 H04L63/1416

    摘要: A network security system can have a plurality of distributed software agents configured to collect security events from network devices. In one embodiment, the agents are configured to aggregate the security events. In one embodiment of the present invention, an agent includes a device interface to receive a security event from a network device, a plurality of aggregation profiles, and an agent aggregate module to select one of the plurality of aggregation profiles, and increment an event count of an aggregate event representing the received security event using the selected aggregation profile.

    摘要翻译: 网络安全系统可以具有被配置为从网络设备收集安全事件的多个分布式软件代理。 在一个实施例中,代理被配置为聚合安全事件。 在本发明的一个实施例中,代理包括从网络设备接收安全事件的设备接口,多个聚合简档和代理聚合模块,用于选择多个聚合简档中的一个,并且增加事件计数 使用所选择的聚合简档表示所接收的安全事件的聚合事件。

    System and method to anonymize data transmitted to a destination computing device
    5.
    发明授权
    System and method to anonymize data transmitted to a destination computing device 有权
    用于对发送到目的地计算设备的数据进行匿名化的系统和方法

    公开(公告)号:US09413526B1

    公开(公告)日:2016-08-09

    申请号:US13844353

    申请日:2013-03-15

    IPC分类号: H04L29/06 H04L9/08

    摘要: A method and system for anonymizing data to be transmitted to a destination computing device is disclosed. Anonymization strategy for data anonymization is provided. Data to be transmitted is received from a user computer. Selective anonymization of the data is performed, based on the anonymization strategy, using an anonymization module. The data is anonymized using the anonymization module, to derive an anonymized data, using a data encryption key. The anonymized data is transmitted to the destination computer over a network. In some embodiments, the data encryption key is encrypted and decrypted prior to anonymization.

    摘要翻译: 公开了一种用于将要发送到目的地计算设备的数据进行匿名化的方法和系统。 提供数据匿名化的匿名化策略。 从用户计算机接收要发送的数据。 基于匿名化策略,使用匿名化模块来执行数据的选择性匿名化。 使用匿名化模块对数据进行匿名化,使用数据加密密钥导出匿名数据。 匿名数据通过网络传输到目标计算机。 在一些实施例中,数据加密密钥在匿名化之前被加密和解密。

    Threat detection in a network security system
    6.
    发明授权
    Threat detection in a network security system 有权
    网络安全系统中的威胁检测

    公开(公告)号:US07861299B1

    公开(公告)日:2010-12-28

    申请号:US11836251

    申请日:2007-08-09

    IPC分类号: G06F11/00

    摘要: A network security system is provided that receives information from various sensors and can analyze the received information. In one embodiment of the present invention, such a system receives a security event from a software agent. The received security event includes a target address and an event signature, as generated by the software agent. The event signature can be used to determine a set of vulnerabilities exploited by the received security event, and the target address can be used to identify a target asset within the network. By accessing a model of the target asset, a set of vulnerabilities exposed by the target asset can be retrieved. Then, a threat can be detected by comparing the set of vulnerabilities exploited by the security event to the set of vulnerabilities exposed by the target asset.

    摘要翻译: 提供一种从各种传感器接收信息并且可以分析所接收的信息的网络安全系统。 在本发明的一个实施例中,这样的系统从软件代理接收安全事件。 所接收的安全事件包括由软件代理产生的目标地址和事件签名。 事件签名可用于确定接收到的安全事件利用的一组漏洞,并且目标地址可用于标识网络内的目标资产。 通过访问目标资产的模型,可以检索目标资产公开的一组漏洞。 然后,可以通过将安全事件利用的一组漏洞与目标资产公开的一组漏洞进行比较来检测威胁。

    Computer automated discovery of interestingness in faceted search
    7.
    发明授权
    Computer automated discovery of interestingness in faceted search 有权
    计算机自动发现有趣的搜索

    公开(公告)号:US07493319B1

    公开(公告)日:2009-02-17

    申请号:US12118206

    申请日:2008-05-09

    IPC分类号: G06F17/30

    摘要: Exemplary embodiments of the present invention relate to enhanced faceted search support for OLAP queries over unstructured text as well as structured dimensions by the dynamic and automatic discovery of dimensions that are determined to be most “interesting” to a user based upon the data. Within the exemplary embodiments “interestingness” is defined as how surprising a summary along some dimensions is from a user's expectation. Further, multi-attribute facets are determined and a user is optionally permitted to specify the distribution of values that she expects, and/or the distance metric by which actual and expected distributions are to be compared.

    摘要翻译: 本发明的示例性实施例涉及通过基于数据被确定为对用户最“有趣”的维度的动态和自动发现的针对非结构化文本的OLAP查询的增强的分面搜索支持以及结构化维度。 在示例性实施例中,“兴趣”被定义为从用户的期望来看,某些维度上的摘要令人惊讶。 此外,确定多属性面,并且可选地允许用户指定她期望的值的分布,和/或要比较实际和预期分布的距离度量。

    Method And Apparatus For Exercising And Debugging Correlations For Network System
    10.
    发明申请
    Method And Apparatus For Exercising And Debugging Correlations For Network System 有权
    网络系统运行调试相关方法与装置

    公开(公告)号:US20110145711A1

    公开(公告)日:2011-06-16

    申请号:US13031079

    申请日:2011-02-18

    CPC分类号: G06F21/552

    摘要: A selected time interval of previously stored events generated by a number of computer network devices are replayed and cross-correlated according to rules. Meta-events are generated when the events satisfy conditions associated with one or more of the rules. The rules used during replay may differ from prior rules used at a time when the events occurred within a computer network that included the computer network devices. In this way, new rules can be tested against true event data streams to determine whether or not the rules should be used in a live environment (i.e., the efficacy of the rules can be tested an tor debugged against actual event data).

    摘要翻译: 由多个计算机网络设备产生的先前存储的事件的选定时间间隔根据规则被重放和交叉相关。 当事件满足与一个或多个规则相关联的条件时,生成元事件。 在播放期间使用的规则可能与在计算机网络中包含计算机网络设备的事件发生时所使用的先前规则不同。 以这种方式,可以针对真实事件数据流来测试新规则,以确定在活动环境中是否应该使用规则(即,可以针对实际事件数据来调试规则的功效)。