Cybersecurity profiling and rating using active and passive external reconnaissance

    公开(公告)号:US11750659B2

    公开(公告)日:2023-09-05

    申请号:US17216939

    申请日:2021-03-30

    申请人: QOMPLX, Inc.

    摘要: A system and method for generating comprehensive security profiles and ratings for organizations that takes into account the organization's infrastructure and operations in generating the profile, and the context and purpose of the rating to be generated related to the profile. The system and method may further comprise gathering data about the totality of the organization's infrastructure and operations, generating a cybersecurity profile using active and passive internal and external reconnaissance of the organization to determine cybersecurity vulnerabilities and potential impacts to the business in light of the information gathered about the organization's infrastructure and operations, and generating cybersecurity scores and ratings that take into account all of the above information, plus the context and purpose of the score or rating to be generated based on the cybersecurity profile.

    System and method for analysis of graph databases using intelligent reasoning systems

    公开(公告)号:US11687527B2

    公开(公告)日:2023-06-27

    申请号:US17084263

    申请日:2020-10-29

    申请人: QOMPLX, Inc.

    摘要: A system for analyzing graph databases using intelligent reasoning systems including scalable collection of, and transformation of, graph data into facts suitable for use with programming logic languages doing deductive reasoning. A graph analyzer ingests disparate graph data from across the Internet and transforms the graph data into a fact table. In order to reduce latency and processing congestion, a stream processing engine and sharding strategy are employed to ensure scalability through parallelized processing of programming logic queries. Transformed graph data, now relational data, is utilized with programming logic languages that allow for hypothetical queries whereby an inference engine can deduce new information to satisfy such a query. Furthermore, the self-contained nature of inputs, outputs, and transformations of the system means strict data provenance can be observed and adhered to.

    Crowdsourced innovation laboratory and process implementation system

    公开(公告)号:US11570214B2

    公开(公告)日:2023-01-31

    申请号:US17061195

    申请日:2020-10-01

    申请人: QOMPLX, Inc.

    摘要: A system and method for crowdsourced innovation and automated process implementation, wherein individuals and businesses use a distributed computational graph module with crowdsourcing-technology to develop ideas and create process workflows for implementing those ideas. The developed process workflows are implemented through a system which automatically integrates heterogenous Internet resources such as electronic commerce, recruiting, and management platforms into a single portal. Businesses and other collaboration initiatives are supported via crowdsourced labor that are automatically orchestrated by the distributed computational graph workflows and user interface that provide a comprehensive and convergent solution for process management.

    Probe-based risk analysis for multi-factor authentication

    公开(公告)号:US11563741B2

    公开(公告)日:2023-01-24

    申请号:US17138202

    申请日:2020-12-30

    申请人: QOMPLX, Inc.

    IPC分类号: H04L9/40 H04L43/04

    摘要: A system for probe-based risk analysis for multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computational graph module configured to probe connection destinations for a response, analyze any received responses, and determine a verification score needed before granting access based at least in part on the analysis of the received responses. A plurality of verification methods build up a user's verification score to required level to gain access.

    SYSTEM AND METHOD FOR DETECTION AND MITIGATION OF DATA SOURCE COMPROMISES IN ADVERSARIAL INFORMATION ENVIRONMENTS

    公开(公告)号:US20230008173A1

    公开(公告)日:2023-01-12

    申请号:US17845826

    申请日:2022-06-21

    申请人: QOMPLX, Inc.

    摘要: A system and method for the detection and mitigation of data source compromises in an adversarial information environment. The system and method feature the ability to scan for, ingest and process, and then use relational, wide column, and graph stores for capturing entity data, their relationships, and actions associated with them. Furthermore, meta-data is gathered and linked to the ingested data, which provides a broader contextual view of the environment leading up to and during an event of interest. Data quality analysis is conducted on the data as it is ingested in order to identify various data source metrics and determine if a data source may be compromised. The results of the data quality analysis, the identified metrics, the gathered data, and meta-data are used to manage the reputation of the contributing data sources. The system can make recommendations on data sources based on the data source reputation scoring.