System, method, and computer program for detection of anomalous user network activity based on multiple data sources

    公开(公告)号:US10944777B2

    公开(公告)日:2021-03-09

    申请号:US16828629

    申请日:2020-03-24

    申请人: Exabeam, Inc.

    摘要: The present disclosure relates a system, method, and computer program for detecting anomalous user network activity based on multiple data sources. The system extracts user event data for n days from multiple data sources to create a baseline behavior model that reflects the user's daily volume and type of IT events. In creating the model, the system addresses data heterogeneity in multi-source logs by categorizing raw events into meta events. Thus, baseline behavior model captures the user's daily meta-event pattern and volume of IT meta events over n days. The model is created using a dimension reduction technique. The system detects any anomalous pattern and volume changes in a user's IT behavior on day n by comparing user meta-event activity on day n to the baseline behavior model. A score normalization scheme allows identification of a global threshold to flag current anomalous activity in the user population.

    System, method, and computer program product for detecting and assessing security risks in a network

    公开(公告)号:US10803183B2

    公开(公告)日:2020-10-13

    申请号:US16657010

    申请日:2019-10-18

    申请人: Exabeam, Inc.

    IPC分类号: G06F21/57 H04L29/06

    摘要: The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

    Message optimization
    34.
    发明授权

    公开(公告)号:US10269028B2

    公开(公告)日:2019-04-23

    申请号:US15653974

    申请日:2017-07-19

    摘要: The present invention provides a system and method for optimizing a message. Components of a starting message are identified, and at least one rule is applied for modifying at least one message component to create at least one variation of the starting message. Message variants are tested by sending each variant to a sample of people and measuring a response rate for each sent message variant. The measured response rates are used to create an optimal version of the message. In one embodiment, message variants may be created and tested in multiple rounds.

    System, method, and computer program for dynamically identifying a merchant associated with an authorization request for a payment card

    公开(公告)号:US09767457B1

    公开(公告)日:2017-09-19

    申请号:US14447200

    申请日:2014-07-30

    申请人: Marqeta, Inc.

    IPC分类号: G06Q20/40

    摘要: The disclosure is directed to a system, method, and computer program for dynamically identify a merchant associated with an authorization request for a payment card, wherein a merchant identifier in the authorization request is unrecognized. A plurality of unique signatures is created for each of a plurality of registered merchants, wherein the signatures for each registered merchant are based on values of merchant attributes associated with the registered merchant. In response to the system receiving an authorization request for a payment card that includes an unrecognized merchant identifier used to process authorization requests, a plurality of unique signatures is generated for the unrecognized merchant based on a combination of merchant attributes in the authorization request. A payment processing system then determines if the signatures match one of the signatures previously created for the registered merchants. If so, the authorization request is identified as originating from the matching registered merchant.

    System, method, and software application for enabling a user to view and interact with a visual map in an external application
    38.
    发明授权
    System, method, and software application for enabling a user to view and interact with a visual map in an external application 有权
    系统,方法和软件应用程序,用于使用户能够在外部应用程序中查看和交互视觉地图

    公开(公告)号:US09396455B2

    公开(公告)日:2016-07-19

    申请号:US12291515

    申请日:2008-11-10

    IPC分类号: G06F17/24 G06Q10/10 G06F17/30

    摘要: The present invention provides a system, method, and software program for enabling a user to view and interact with a visual map in an external application. According to one embodiment of the invention, a visual mapping application creates a file with (i) visual map data and (ii) software code capable of being executed by an external application to display the visual map and provide select visual mapping application in the external application. In one embodiment, such functionality includes the ability to expand and collapse map topics, scroll the map, zoom in and out, follow hypertext links in the map, find content in the map, and print the map. The created file can be thought of as a “visual map player” in that an external application can “play” the created file, resulting in a live map in the external application.

    摘要翻译: 本发明提供了一种系统,方法和软件程序,用于使用户能够在外部应用中查看和与视觉地图交互。 根据本发明的一个实施例,视觉映射应用程序创建具有(i)可视地图数据的文件和(ii)能够由外部应用程序执行以显示可视映射并且在外部提供选择视觉映射应用的软件代码 应用。 在一个实施例中,这样的功能包括扩展和折叠地图主题,滚动地图,放大和缩小,跟随地图中的超文本链接,在地图中查找内容并打印地图的能力。 创建的文件可以被认为是“视觉地图播放器”,因为外部应用程序可以“播放”创建的文件,从而导致外部应用程序中的实时地图。

    System and method for generating a user interface by auctioning space on the user interface to self-determining, content-providing modules
    40.
    发明授权
    System and method for generating a user interface by auctioning space on the user interface to self-determining, content-providing modules 有权
    用于通过拍摄用户界面上的空间来自定义内容提供模块来生成用户界面的系统和方法

    公开(公告)号:US09304660B1

    公开(公告)日:2016-04-05

    申请号:US13410290

    申请日:2012-03-01

    IPC分类号: G06F3/0484 G06F9/44

    摘要: A system and method is provided for generating a dynamic, user interface that is capable of frequently changing and learning to provide the most relevant information to the user. The method includes executing a plurality of user interface (UI) modules on a computing device. Each UI module is a software component that provides content for display in the user interface. Each UI module determines its own content and its own priority level and bids for user interface space using its determined priority level. A UI controller is executed on the computing device. The UI controller is a software component that receives bids for the UI modules, determines the number of available spots for UI modules in the user interface, and selects UI modules associated with the highest priority for display in the available user interface spots.

    摘要翻译: 提供了一种系统和方法,用于生成能够经常改变和学习以向用户提供最相关信息的动态用户界面。 该方法包括在计算设备上执行多个用户界面(UI)模块。 每个UI模块是一个软件组件,提供用于在用户界面中显示的内容。 每个UI模块使用其确定的优先级来确定其自己的内容及其自己的优先级和用户界面空间的出价。 在计算设备上执行UI控制器。 UI控制器是接收UI模块的出价的软件组件,确定用户界面中UI模块的可用点数,并且选择与最高优先级相关联的UI模块,以在可用的用户界面点中显示。