利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

99 条记录 (耗时 0.028 秒)

    SYSTEMS, METHODS, AND MEDIA FOR GENERATING SANITIZED DATA, SANITIZING ANOMALY DETECTION MODELS, AND/OR GENERATING SANITIZED ANOMALY DETECTION MODELS
    5.
    发明申请
    SYSTEMS, METHODS, AND MEDIA FOR GENERATING SANITIZED DATA, SANITIZING ANOMALY DETECTION MODELS, AND/OR GENERATING SANITIZED ANOMALY DETECTION MODELS 审中-公开
    用于生成消毒数据的系统，方法和媒体，消除异常检测模型和/或生成经过化验的异常检测模型

    公开(公告)号：US20150326597A1

    公开(公告)日：2015-11-12

    申请号：US14798006

    申请日：2015-07-13

    申请人： Gabriela F. Ciocarlie ,  Angelos Stavrou ,  Salvatore J. Stolfo ,  Angelos D. Keromytis

    发明人： Gabriela F. Ciocarlie ,  Angelos Stavrou ,  Salvatore J. Stolfo ,  Angelos D. Keromytis

    IPC分类号： H04L29/06

    CPC分类号： H04L63/1425 ,  G06N99/005 ,  H04L63/14

    摘要： Systems, methods, and media for generating sanitized data, sanitizing anomaly detection models, and generating anomaly detection models are provided. In some embodiments, methods for sanitizing anomaly detection models are provided. The methods including: receiving at least one abnormal anomaly detection model from at least one remote location; comparing at least one of the at least one abnormal anomaly detection model to a local normal detection model to produce a common set of features common to both the at least one abnormal anomaly detection model and the local normal detection model; and generating a sanitized normal anomaly detection model by removing the common set of features from the local normal detection model.

    摘要翻译： 提供了生成消毒数据，消毒异常检测模型和生成异常检测模型的系统，方法和介质。 在一些实施例中，提供了用于消毒异常检测模型的方法。 所述方法包括：从至少一个远程位置接收至少一个异常异常检测模型; 将所述至少一个异常异常检测模型中的至少一个与本地正常检测模型进行比较，以产生所述至少一个异常异常检测模型和所述局部正常检测模型共同的共同特征集合; 并通过从局部正态检测模型中去掉共同的特征集，产生消毒的正常异常检测模型。

    Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems
    6.
    发明授权
    Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems 有权
    在协作计算机系统之间关联和分发入侵警报信息的系统和方法

    公开(公告)号：US08667588B2

    公开(公告)日：2014-03-04

    申请号：US12837302

    申请日：2010-07-15

    申请人： Salvatore J. Stolfo ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael E. Locasto ,  Janak Parekh

    发明人： Salvatore J. Stolfo ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael E. Locasto ,  Janak Parekh

    IPC分类号： H04L29/06

    CPC分类号： H04L63/1408

    摘要： Systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

    摘要翻译： 系统和方法提供警报相关器和警报分发器，其能够检测到攻击的早期迹象并且迅速地传播到协作系统。 警报相关器利用数据结构来关联警报检测，并提供可以向其他协作系统透露威胁信息的机制。 警报分配器使用有效的技术来对协作系统进行分组，然后根据时间表在某些成员之间传递数据。 以这种方式，数据可以定期分布，而不会产生过多的流量负载。

    Systems and Methods for Correlating and Distributing Intrusion Alert Information Among Collaborating Computer Systems
    7.
    发明申请
    Systems and Methods for Correlating and Distributing Intrusion Alert Information Among Collaborating Computer Systems 有权
    在协作计算机系统中关联和分发入侵警报信息的系统和方法

    公开(公告)号：US20100281542A1

    公开(公告)日：2010-11-04

    申请号：US12837302

    申请日：2010-07-15

    申请人： Salvatore J. Stolfo ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael E. Locasto ,  Janak Parekh

    发明人： Salvatore J. Stolfo ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael E. Locasto ,  Janak Parekh

    IPC分类号： G06F11/00 ,  G06F15/16

    CPC分类号： H04L63/1408

    摘要： Systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

    摘要翻译： 系统和方法提供警报相关器和警报分发器，其能够检测到攻击的早期迹象并且迅速地传播到协作系统。 警报相关器利用数据结构来关联警报检测，并提供可以向其他协作系统透露威胁信息的机制。 警报分配器使用有效的技术来对协作系统进行分组，然后根据时间表在某些成员之间传递数据。 以这种方式，数据可以定期分布，而不会产生过多的流量负载。

    Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems
    8.
    发明授权
    Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems 有权
    在协作计算机系统之间关联和分发入侵警报信息的系统和方法

    公开(公告)号：US07784097B1

    公开(公告)日：2010-08-24

    申请号：US10996574

    申请日：2004-11-24

    申请人： Salvatore J. Stolfo ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael E. Locasto ,  Janak Parekh

    发明人： Salvatore J. Stolfo ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael E. Locasto ,  Janak Parekh

    IPC分类号： G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G06F11/30 ,  G06F15/16 ,  G06F15/177 ,  G08B23/00 ,  B41K3/38

    CPC分类号： H04L63/1408

    摘要： Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems are provided. These systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

    摘要翻译： 提供了在协作计算机系统之间关联和分发入侵警报信息的系统和方法。 这些系统和方法提供警报相关器和警报分发器，其使得能够检测到攻击的早期迹象并且迅速地传播到协作系统。 警报相关器利用数据结构来关联警报检测，并提供可以向其他协作系统透露威胁信息的机制。 警报分配器使用有效的技术来对协作系统进行分组，然后根据时间表在某些成员之间传递数据。 以这种方式，数据可以定期分布，而不会产生过多的流量负载。

    Systems and Methods for Correlating and Distributing Intrusion Alert Information Among Collaborating Computer Systems
    9.
    发明申请
    Systems and Methods for Correlating and Distributing Intrusion Alert Information Among Collaborating Computer Systems 有权
    在协作计算机系统中关联和分发入侵警报信息的系统和方法

    公开(公告)号：US20100281541A1

    公开(公告)日：2010-11-04

    申请号：US12833743

    申请日：2010-07-09

    申请人： Salvatore J. Stolfo ,  Tal Malkin ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael Locasto ,  Janak Parekh

    发明人： Salvatore J. Stolfo ,  Tal Malkin ,  Angelos D. Keromytis ,  Vishal Misra ,  Michael Locasto ,  Janak Parekh

    IPC分类号： G06F11/00

    CPC分类号： H04L63/1416 ,  G06F21/552 ,  G06F21/554 ,  H04L63/145 ,  H04L63/1475 ,  H04L63/1491

    摘要： Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems are provided. These systems and methods provide an alert correlator and an alert distributor that enable early signs of an attack to be detected and rapidly disseminated to collaborating systems. The alert correlator utilizes data structures to correlate alert detections and provide a mechanism through which threat information can be revealed to other collaborating systems. The alert distributor uses an efficient technique to group collaborating systems and then pass data between certain members of those groups according to a schedule. In this way data can be routinely distributed without generating excess traffic loads.

    摘要翻译： 提供了在协作计算机系统之间关联和分发入侵警报信息的系统和方法。 这些系统和方法提供警报相关器和警报分发器，其使得能够检测到攻击的早期迹象并且迅速地传播到协作系统。 警报相关器利用数据结构来关联警报检测，并提供可以向其他协作系统透露威胁信息的机制。 警报分配器使用有效的技术来对协作系统进行分组，然后根据时间表在某些成员之间传递数据。 以这种方式，数据可以定期分布，而不会产生过多的流量负载。