公开(公告)号：US20180004961A1

公开(公告)日：2018-01-04

申请号：US15709113

申请日：2017-09-19

申请人： Exabeam, Inc.

发明人： Sylvain Gil ,  Domingo Mihovilovic ,  Nir Polak ,  Magnus Stensmo ,  Sing Yip

IPC分类号： G06F21/57 ,  H04L29/06

CPC分类号： G06F21/577 ,  H04L63/1416 ,  H04L63/1433

摘要： The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

公开(公告)号：US10803183B2

公开(公告)日：2020-10-13

申请号：US16657010

申请日：2019-10-18

申请人： Exabeam, Inc.

发明人： Sylvain Gil ,  Domingo Mihovilovic ,  Nir Polak ,  Magnus Stensmo ,  Sing Yip

IPC分类号： G06F21/57 ,  H04L29/06

摘要： The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

公开(公告)号：US20190034641A1

公开(公告)日：2019-01-31

申请号：US16150604

申请日：2018-10-03

申请人： Exabeam, Inc.

发明人： Sylvain Gil ,  Domingo Mihovilovic ,  Nir Polak ,  Magnus Stensmo ,  Sing Yip

IPC分类号： G06F21/57 ,  H04L29/06

摘要： The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

公开(公告)号：US10095871B2

公开(公告)日：2018-10-09

申请号：US15709113

申请日：2017-09-19

申请人： Exabeam, Inc.

发明人： Sylvain Gil ,  Domingo Mihovilovic ,  Nir Polak ,  Magnus Stensmo ,  Sing Yip

IPC分类号： G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00 ,  G06F21/57 ,  H04L29/06

摘要： The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

公开(公告)号：US10474828B2

公开(公告)日：2019-11-12

申请号：US16150604

申请日：2018-10-03

申请人： Exabeam, Inc.

发明人： Sylvain Gil ,  Domingo Mihovilovic ,  Nir Polak ,  Magnus Stensmo ,  Sing Yip

IPC分类号： G06F21/57 ,  H04L29/06

摘要： The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

公开(公告)号：US09798883B1

公开(公告)日：2017-10-24

申请号：US14507585

申请日：2014-10-06

申请人： Exabeam, Inc.

发明人： Sylvain Gil ,  Domingo Mihovilovic ,  Nir Polak ,  Magnus Stensmo ,  Sing Yip

IPC分类号： G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G06F21/57 ,  H04L29/06

CPC分类号： G06F21/577 ,  H04L63/1416 ,  H04L63/1433

摘要： The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.