利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

2643 条记录 (耗时 0.029 秒)

    Scanning of files in a customer account of a cloud service for cybersecurity
    1.
    发明授权
    Scanning of files in a customer account of a cloud service for cybersecurity 有权

    公开(公告)号：US12130922B1

    公开(公告)日：2024-10-29

    申请号：US17967647

    申请日：2022-10-17

    申请人： Trend Micro Incorporated

    发明人： Brendan M. Johnson

    IPC分类号： G06F21/55 ,  G06F21/56

    CPC分类号： G06F21/568 ,  G06F21/552 ,  G06F21/565

    摘要： A cloud computing infrastructure hosts a web service with customer accounts. In a customer account, files of the customer account are listed in an index. Files indicated in the index are arranged in groups, with files in each group being scanned using scanning serverless functions in the customer account. The files in the customer account include a compressed tar archive of a software container. Member files of a compressed tar archive in a customer account are randomly-accessed by way of locators that indicate a tar offset, a logical offset, and a decompressor state for a corresponding member file. A member file is accessed by seeking to the tar offset in the compressed tar archive, restoring a decompressor to the decompressor state, decompressing the compressed tar archive using the decompressor, and moving to the logical offset in the decompressed data in memory.

    Privacy protection for customer events logs of cybersecurity events
    7.
    发明授权
    Privacy protection for customer events logs of cybersecurity events 有权

    公开(公告)号：US12019782B1

    公开(公告)日：2024-06-25

    申请号：US17530680

    申请日：2021-11-19

    申请人： Trend Micro Incorporated

    发明人： Jonathan James Oliver

    IPC分类号： G06F21/62 ,  H04L9/32 ,  H04L9/40

    CPC分类号： G06F21/6245 ,  H04L9/3255 ,  H04L63/1425

    摘要： System and methods of analyzing customer events logs for cybersecurity with privacy protection are disclosed. Events logs of cybersecurity events are received from customer computers. Customers in the events logs are represented with ring signatures. Candidate features that occur in a group of events are identified in the events logs. A candidate feature is analyzed, based on corresponding ring signatures, to determine if the candidate feature can be attributed to a customer or a limited number of customers. If so, the candidate feature is considered private and is discarded. Otherwise, the candidate feature is retained as public data suitable for use in cybersecurity operations.

    Graph-based anomaly detection for cybersecurity
    10.
    发明授权
    Graph-based anomaly detection for cybersecurity 有权

    公开(公告)号：US11907368B1

    公开(公告)日：2024-02-20

    申请号：US17534727

    申请日：2021-11-24

    申请人： Trend Micro Incorporated

    发明人： Peng Ye ,  Jingchen Ke

    IPC分类号： G06F21/55

    CPC分类号： G06F21/552 ,  G06F21/554 ,  G06F2221/2101

    摘要： Anomalous activities on a computer network are detected from audit or sign-in activity information of a target entity as recorded in an audit or sign-in log. A baseline graph of the target entity is generated using information on activities of the target entity during a collection period. A predict graph of the target entity is generated with information on activities of the target entity during another collection period, which follows and is shorter than the earlier collection period. A residual graph that indicates nodes or edges that are in the predict graph but not in the baseline graph is generated. The residual graph is scored and the score is compared to a threshold to determine whether the target entity has performed an anomalous activity.