Invention Grant
- Patent Title: Detection of potential security threats in machine data based on pattern detection
-
Application No.: US16777544Application Date: 2020-01-30
-
Publication No.: US11134094B2Publication Date: 2021-09-28
- Inventor: Munawar Monzy Merza , John Coates , James M Hansen , Lucas Murphey , David Hazekamp , Michael Kinsley , Alexander Raitz
- Applicant: SPLUNK INC.
- Applicant Address: US CA San Francisco
- Assignee: SPLUNK INC.
- Current Assignee: SPLUNK INC.
- Current Assignee Address: US CA San Francisco
- Agency: Perkins Coie LLP
- Main IPC: H04L29/06
- IPC: H04L29/06 ; G06F21/55 ; G06F16/2458

Abstract:
A metric value is determined for each event in a set of events that characterizes a computational communication or object. For example, a metric value could include a length of a URL or agent string in the event. A subset criterion is generated, such that metric values within the subset are relatively separated from a population's center (e.g., within a distribution tail). Application of the criterion to metric values produces a subset. A representation of the subset is presented in an interactive dashboard. The representation can include unique values in the subset and counts of corresponding event occurrences. Clients can select particular elements in the representation to cause more detail to be presented with respect to individual events corresponding to specific values in the subset. Thus, clients can use their knowledge system operations and observance of value frequencies and underlying events to identify anomalous metric values and potential security threats.
Public/Granted literature
- US20200169579A1 DETECTION OF POTENTIAL SECURITY THREATS IN MACHINE DATA BASED ON PATTERN DETECTION Public/Granted day:2020-05-28
Information query