MACHINE LEARNING-BASED SYSTEM FOR DYNAMIC VARIABLE DETERMINATION AND LABELING

    公开(公告)号:US20240427916A1

    公开(公告)日:2024-12-26

    申请号:US18211806

    申请日:2023-06-20

    Abstract: Arrangements for dynamic variable determination and labeling are provided. In some aspects, a computing platform may receive historical user data from a plurality of data sources. The computing platform may train, using the historical user data, a machine learning model to generate a plurality of dynamic variable profiles and evaluate data to detect potential unauthorized activity. One or more dynamic variable profiles of the generated plurality of dynamic variable profiles may be associated with a user. User specific data may be received and may include user identifying data and a request for a user event. The user specific data may be input to the machine learning model and, upon execution of the model, the model may output a determination of whether an anomaly exists in the user specific data. If an anomaly is detected, a mitigating action may be identified and transmitted to one or more computing devices for execution.

    THREAT DETECTION WITHIN INFORMATION SYSTEMS

    公开(公告)号:US20220337601A1

    公开(公告)日:2022-10-20

    申请号:US17231644

    申请日:2021-04-15

    Abstract: A device that is configured to receive user activity information that includes information about user interactions with a network device for a plurality of users. The device is further configured to receive a set of bad actor candidates that identifies one or more users from among the plurality of users. The device is further configured to filter the user activity information based on the set of bad actor candidates. The device is further configured to input the filtered user activity information into a machine learning model. The machine learning model is configured to receive the filtered user activity information and to output system exposure information that identifies network security threats. The device is further configured to identify network security actions based on the network security threats and to execute the network security actions.

    SYSTEM AND METHOD FOR ROUTING DATA TO AUTHORIZED USERS BASED ON SECURITY CLASSIFICATION OF DATA

    公开(公告)号:US20220253539A1

    公开(公告)日:2022-08-11

    申请号:US17170963

    申请日:2021-02-09

    Abstract: A system for classifying a data item to communicate to authorized users extracts features from the data item, where the features comprise a responsibility feature and a sensitivity feature. The responsibility feature indicates a job responsibility associated with the data item. The sensitivity feature indicates a sensitivity level of the data item. The system determines, based on the responsibility feature, that the data item belongs to a particular responsibility class. The system determines, based on the sensitivity feature, that the data item belongs to a particular sensitivity class. The system determines whether a user to whom the data item is directed belongs to the particular responsibility class and sensitivity class to which the data item belongs. The system sends the data item to the user, if is it determined that the user belongs to the particular responsibility class and sensitivity class to which the data item belongs.

    System and method for associating a common vulnerability and exposures (CVE) with a computing device and applying a security patch

    公开(公告)号:US12093396B2

    公开(公告)日:2024-09-17

    申请号:US16931099

    申请日:2020-07-16

    CPC classification number: G06F21/577 G06F2221/034

    Abstract: A system is configured for associating a CVE with a particular device profile is disclosed. The system receives a request from a user to associate a CVE with a particular device profile. For each device profile from a plurality of device profiles stored in a memory, the system determines feature importance values for features of each device profile. The features of each device profile include at least an operating system and a CPU architecture. The feature importance value of a corresponding feature of a device profile associated with a CVE indicates a probability of the CVE to affect the device profile with respect to that feature. The system identifies a device profile that has features with a total feature importance value above a feature importance threshold value. The system identifies a particular CVE associated with the identified device profile. The system associates the particular CVE with the particular device profile.

    System and method for server monitoring and problem resolution for electronic mail messages

    公开(公告)号:US20240114001A1

    公开(公告)日:2024-04-04

    申请号:US17937609

    申请日:2022-10-03

    CPC classification number: H04L63/0236 H04L63/205

    Abstract: A method is provided that comprises monitoring for a change in a first security configuration setting in a relay server and comparing the change in the first security configuration setting to historical data that contains validated authentication configuration settings that previously allowed for the delivery of a historical electronic mail message to an external network. The method further comprises identifying a candidate change to the first security configuration setting based on the comparison, where the candidate change to the first security configuration setting when implemented results in the delivery of a first electronic mail message to the external network. The method further comprises implementing the candidate change to the first security configuration setting such that the relay server allows the delivery of the first electronic message to the external network.

    Threat detection and prevention for information systems

    公开(公告)号:US11930025B2

    公开(公告)日:2024-03-12

    申请号:US17231456

    申请日:2021-04-15

    CPC classification number: H04L63/1425 G06N20/00 H04L63/0236

    Abstract: A device that is configured to receive user activity information that includes information about user interactions with a network device for a plurality of users. The device is further configured to input the user activity information into a first machine learning model that is configured to receive user activity information and to output a set of bad actor candidates based on the user activity information. The device is further configured to filter the user activity information based on the set of bad actor candidates. The device is further configured to input the filtered user activity information into a second machine learning model that is configured to receive the filtered user activity information and to output system exposure information that identifies network security threats. The device is further configured to identify network security actions based on the network security threats and to execute the network security actions.

    System and Method for Associating a Common Vulnerability and Exposures (CVE) with a Computing Device and Applying a Security Patch

    公开(公告)号:US20220019673A1

    公开(公告)日:2022-01-20

    申请号:US16931099

    申请日:2020-07-16

    Abstract: A system is configured for associating a CVE with a particular device profile is disclosed. The system receives a request from a user to associate a CVE with a particular device profile. For each device profile from a plurality of device profiles stored in a memory, the system determines feature importance values for features of each device profile. The features of each device profile include at least an operating system and a CPU architecture. The feature importance value of a corresponding feature of a device profile associated with a CVE indicates a probability of the CVE to affect the device profile with respect to that feature. The system identifies a device profile that has features with a total feature importance value above a feature importance threshold value. The system identifies a particular CVE associated with the identified device profile. The system associates the particular CVE with the particular device profile.

Patent Agency Ranking