公开(公告)号：US20190065739A1

公开(公告)日：2019-02-28

申请号：US15689043

申请日：2017-08-29

Applicant: EntIT Software LLC

Inventor： Pratyusa K. Manadhata ,  Mijung Kim ,  Manish Marwah

IPC: G06F21/55 ,  G06F21/62 ,  G06F21/45 ,  H04L29/06

Abstract: In some examples, for a given authentication event between a plurality of devices in a network, a system identifies a set of events, at the devices, that are temporally related to the given authentication event. The system applies a classifier on a collection of features associated with the set of events, and determines, based on an output of the classifier, whether the given authentication event is an unauthorized authentication event.

公开(公告)号：US20190065738A1

公开(公告)日：2019-02-28

申请号：US15692655

申请日：2017-08-31

Applicant: EntIT Software LLC

Inventor： Mijung Kim ,  Pratyusa K. Manadhata ,  Manish Marwah ,  Alexander Ulanov ,  Jun Li

IPC: G06F21/55 ,  G06F21/57 ,  G06N3/08

Abstract: In some examples, a system extracts features from event data representing events in a computing environment, trains ensembles of machine-learning models for respective analytics modules of a plurality of different types of analytics modules, and detects, by the different types of analytics modules using the respective trained ensembles of machine-learning models, an anomalous entity in response to further event data.