Defanging malicious electronic files based on trusted user reporting

    公开(公告)号:US11856007B2

    公开(公告)日:2023-12-26

    申请号:US17114212

    申请日:2020-12-07

    CPC classification number: H04L63/1416 G06F9/54 H04L63/1425 H04L63/1441

    Abstract: A system and a method are disclosed for determining that a first electronic communication, received in a first private repository of a user, has been identified (e.g., flagged) as including a threat, and determining a probability that the first electronic communication includes the threat. In response to determining that the probability exceeds a threshold probability, the system monitors monitoring for a second electronic communication, received in a second private repository, that includes contents that match the contents of the first electronic communication. In response to, based on the monitoring, identification of the second electronic communication, the system generates a copy of the second electronic communication to an administrative private repository of an administrator, edits the copy to remove a portion that is likely to include the threat, inserts the copy of the second electronic communication to the second private repository, and deletes the second electronic communication from the second private repository.

    Transportation security apparatus, system, and method to analyze images to detect a threat condition

    公开(公告)号:US11846746B2

    公开(公告)日:2023-12-19

    申请号:US17744507

    申请日:2022-05-13

    Abstract: In a transportation security technique, images are stored that are received from image capturing equipment deployed at respective screening nodes. The images are analyzed using a machine learning model, where presence of a particular object in an image indicates that a threat condition exists at the screening node. The analyzed images are transmitted to threat assessment components in accordance with predetermined criteria. An indication that the particular object is observed in the image is received from the threat assessment components. An indication that the particular object is observed in the image is transmitted to the screening node responsive to receiving the indication that the particular object is observed in the image. An indication of whether the particular object is present at the screening node is received. The machine learning model is trained based on the received indication of whether the particular object is observed in the image.

    Method and Apparatus for Detecting Security Event, and Computer-Readable Storage Medium

    公开(公告)号:US20230396633A1

    公开(公告)日:2023-12-07

    申请号:US18204906

    申请日:2023-06-01

    CPC classification number: H04L63/1416 H04L63/1425 H04L63/1441

    Abstract: The present disclosure discloses a method and apparatus for detecting security event, and a non-transitory computer-readable storage medium, and relates to the field of big data. The method includes: acquiring a time window, and acquiring log data, wherein the time window is a rolling window in a preset period; matching the log data with a security event model in each time window, so as to generate a matching result set in each time window, wherein the security event model is a model comprising a plurality of rule models for identifying whether the log data has an attack behavior; and generating security event data according to the matching result set, so as to restore an attack process according to the security event data.

Patent Agency Ranking