公开(公告)号：US10657263B2

公开(公告)日：2020-05-19

申请号：US15489749

申请日：2017-04-18

Applicant: International Business Machines Corporation

Inventor： Allon Adir ,  Ehud Aharoni ,  Lev Greenberg

IPC: H04L29/06 ,  G06F21/57 ,  G06Q10/06

Abstract: Setting a budget of alerts for single or multiple risk score types, adjusting a working threshold based on the set budget, wherein adjusting the working threshold is done by defining an reference threshold for an alert, providing a history of recorded risk scores within a budget sliding interval window and adjusting the working threshold such that a number of alerts which would have been provided by the recorded risk scores is calculated to stay within the set budget, and using the adjusted working threshold to normalize and optionally combine incoming risk scores so as to determine whether an incoming risk score should receive an alert.

公开(公告)号：US20190238571A1

公开(公告)日：2019-08-01

申请号：US15881815

申请日：2018-01-29

Applicant: International Business Machines Corporation

Inventor： ALLON ADIR ,  Omri Soceanu ,  Lev Greenberg

IPC: H04L29/06 ,  H04L12/58

Abstract: Embodiments of the present invention may detect, identify, and notify of email phishing attacks. For example, a method may comprise constructing at least one behavioral model for an organization based on features extracted from a plurality of email messages and based on information relating to the organization, including analyzing behavioral patterns of emails in the organization, analyzing a plurality of new email messages using the behavioral model to determine non-binary scores representing analysis of features of the messages, including behavioral patterns of the new emails in the organization with regard to the features, determining whether any of the plurality of new email messages are malicious email messages based on the non-binary scores for the new email messages indicating that the new email messages deviate from the behavioral patterns of emails in the organization included in the behavioral model, and transmitting a notification that a message is a malicious email message.

公开(公告)号：US10242087B2

公开(公告)日：2019-03-26

申请号：US15593859

申请日：2017-05-12

Applicant: International Business Machines Corporation

Inventor： Omri Soceanu ,  Lev Greenberg ,  Allon Adir

IPC: G06F17/30 ,  G06F17/18 ,  G06N99/00

Abstract: A data manager determines an appropriate number of clusters for continuous data using unsupervised learning. The data manager selects an appropriate number of clusters based on at least one temporal stability measure between continuous data from at least two time intervals.

公开(公告)号：US20180300486A1

公开(公告)日：2018-10-18

申请号：US15489749

申请日：2017-04-18

Applicant: International Business Machines Corporation

Inventor： Allon Adir ,  Ehud Aharoni ,  Lev Greenberg

IPC: G06F21/57

Abstract: Setting a budget of alerts for single or multiple risk score types, adjusting a working threshold based on the set budget, wherein adjusting the working threshold is done by defining an reference threshold for an alert, providing a history of recorded risk scores within a budget sliding interval window and adjusting the working threshold such that a number of alerts which would have been provided by the recorded risk scores is calculated to stay within the set budget, and using the adjusted working threshold to normalize and optionally combine incoming risk scores so as to determine whether an incoming risk score should receive an alert.

公开(公告)号：US10095774B1

公开(公告)日：2018-10-09

申请号：US15849725

申请日：2017-12-21

Applicant: International Business Machines Corporation

Inventor： Omri Soceanu ,  Lev Greenberg ,  Allon Adir

IPC: G06F17/30 ,  G06N99/00 ,  G06F17/18

Abstract: A data manager determines an appropriate number of clusters for continuous data using unsupervised learning. The data manager selects an appropriate number of clusters based on at least one temporal stability measure between continuous data from at least two time intervals.

公开(公告)号：US20170147831A1

公开(公告)日：2017-05-25

申请号：US15291618

申请日：2016-10-12

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Allon Adir ,  Ehud Aharoni ,  Lev Greenberg ,  Roza Miroshnikov ,  Asaf Polakovski

IPC: G06F21/62 ,  G06F21/60

CPC classification number: G06F21/6218 ,  G06F21/552 ,  G06F21/60 ,  G06F21/602 ,  G06F21/6254 ,  G06F2221/2107

Abstract: Embodiments include method, systems and computer program products for protecting sensitive data. Aspects include accessing computer readable program instructions having one or more output commands. Aspects also include locating the one or more output commands in the computer readable program instructions. Aspects also include identifying target output variables and output constants in the one or more output commands. Aspects also include modifying the computer readable program instructions to append one or more obfuscate commands to the target output variables.

公开(公告)号：US20140095118A1

公开(公告)日：2014-04-03

申请号：US13631996

申请日：2012-09-30

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Henry Broodney ,  Dolev Dotan ,  Lev Greenberg ,  Michael Masin

IPC: G06F17/50

CPC classification number: G06F17/50 ,  G06F17/5009 ,  G06F17/5086 ,  G06F17/5095

Abstract: A method for concise modeling comprising: receiving a first model mapping a plurality of prototype connections between a plurality of prototype objects; receiving at least one dataset having a plurality of optional objects each said object matching one of said plurality of prototype objects; and automatically constructing a second model having at least one of said plurality of optional objects mapped according to said first model.

Abstract translation: 一种用于简明建模的方法，包括：接收映射多个原型对象之间的多个原型连接的第一模型; 接收具有多个可选对象的至少一个数据集，每个所述对象与所述多个原型对象中的一个匹配; 以及自动构建具有根据所述第一模型映射的所述多个可选对象中的至少一个的第二模型。