利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

292 条记录 (耗时 0.02 秒)

    Using a security analytics map to trace entity interaction
    3.
    发明授权
    Using a security analytics map to trace entity interaction 有权

    公开(公告)号：US11902296B2

    公开(公告)日：2024-02-13

    申请号：US17139058

    申请日：2020-12-31

    申请人： Forcepoint, LLC

    发明人： Andrew Mortensen ,  Assaf Almaz ,  David Coffey ,  Ofir Arkin

    IPC分类号： H04L9/40 ,  G06F21/56 ,  G06F21/57 ,  H04L67/306

    CPC分类号： H04L63/14 ,  G06F21/566 ,  G06F21/577 ,  H04L63/102 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/1433 ,  H04L63/205 ,  H04L67/306 ,  G06F2221/034

    摘要： A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes monitoring a plurality of electronically-observable actions of a first entity, the plurality of electronically-observable actions of the first entity corresponding to a respective first plurality of events enacted by the first entity; monitoring a plurality of electronically-observable actions of a second entity, the plurality of electronically-observable actions of the second entity corresponding to a respective second plurality of events enacted by the second entity; determining whether a first event of the respective first plurality of events and a second event of the respective second plurality of events comprise an entity interaction between the first entity and the second entity; generating an entity interaction map, the entity interaction map providing a representation of the entity interaction between the first entity and the second entity; and, using the entity interaction map to trace the entity interaction between the first entity and the second entity.

    Security analytics mapping operation within a distributed security analytics environment
    4.
    发明授权
    Security analytics mapping operation within a distributed security analytics environment 有权

    公开(公告)号：US11888864B2

    公开(公告)日：2024-01-30

    申请号：US17131018

    申请日：2020-12-22

    申请人： Forcepoint, LLC

    发明人： Lawrence Bruce Huston, III ,  David Coffey

    IPC分类号： H04L9/40 ,  G06F21/56 ,  G06F21/57 ,  H04L67/306

    CPC分类号： H04L63/04 ,  G06F21/566 ,  G06F21/577 ,  H04L63/102 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/1433 ,  H04L63/205 ,  H04L67/306 ,  G06F2221/034

    摘要： A system, method, and computer-readable medium are disclosed for performing a security analytics mapping operation. The security analytics mapping operation includes receiving a plurality of electronically-observable actions of a first entity, the plurality of electronically-observable actions of the first entity corresponding to a respective first plurality of events enacted by the first entity; receiving a plurality of electronically-observable actions of a second entity, the plurality of electronically-observable actions of the second entity corresponding to a respective second plurality of events enacted by the second entity; determining, via a distributed security analytics environment, whether a first event of the respective first plurality of events and a second event of the respective second plurality of events comprise an entity interaction between the first entity and the second entity; and, generating, via the distributed security analytics environment, an entity interaction map, the entity interaction map providing a representation of the entity interaction between the first entity and the second entity.

    System and method for operating an endpoint agent at an endpoint device
    6.
    发明授权
    System and method for operating an endpoint agent at an endpoint device 有权

    公开(公告)号：US11836248B2

    公开(公告)日：2023-12-05

    申请号：US16206194

    申请日：2018-11-30

    申请人： Forcepoint, LLC

    发明人： Peidong Chen ,  Manikandan Thiagarajan ,  Michael Miller ,  Xin Hu

    IPC分类号： G06F7/04 ,  G06F21/55 ,  H04L9/40

    CPC分类号： G06F21/554 ,  G06F21/552 ,  H04L63/20 ,  G06F2221/034

    摘要： A method, system and computer-usable medium are disclosed for operating an endpoint agent at an endpoint device. Certain embodiments include a computer-implemented method for operating an endpoint agent at an endpoint device, including: operating the endpoint agent to selectively subscribe to events corresponding to activities occurring at an endpoint platform; processing events received from a message bus by the endpoint agent, where the events processed by the endpoint agent are events to which the endpoint agent has subscribed; and communicating, to a service, information corresponding to the events processed by the endpoint agent. Other embodiments of this aspect of the invention may include corresponding stand-alone and/or network computer systems, apparatus, and computer programs recorded on one or more computer storage devices, each configured to perform one or more of these actions.