Security analytics mapping operation within a distributed security analytics environment

    公开(公告)号:US11888864B2

    公开(公告)日:2024-01-30

    申请号:US17131018

    申请日:2020-12-22

    申请人: Forcepoint, LLC

    摘要: A system, method, and computer-readable medium are disclosed for performing a security analytics mapping operation. The security analytics mapping operation includes receiving a plurality of electronically-observable actions of a first entity, the plurality of electronically-observable actions of the first entity corresponding to a respective first plurality of events enacted by the first entity; receiving a plurality of electronically-observable actions of a second entity, the plurality of electronically-observable actions of the second entity corresponding to a respective second plurality of events enacted by the second entity; determining, via a distributed security analytics environment, whether a first event of the respective first plurality of events and a second event of the respective second plurality of events comprise an entity interaction between the first entity and the second entity; and, generating, via the distributed security analytics environment, an entity interaction map, the entity interaction map providing a representation of the entity interaction between the first entity and the second entity.

    Cybersecurity System Having Digital Certificate Reputation System

    公开(公告)号:US20210344667A1

    公开(公告)日:2021-11-04

    申请号:US16865176

    申请日:2020-05-01

    申请人: Forcepoint, LLC

    IPC分类号: H04L29/06

    摘要: A system, method, and computer-readable medium are disclosed for implementing a cybersecurity system having a digital certificate reputation system. At least one embodiment is directed to a computer-implemented method executing operations including receiving a communication having an internet protocol (IP) address and a digital certificate at a device within the secured network; determining whether the IP address is identified as having a high-security risk level; if the IP address has a high-security risk level, assigning a security risk level to the digital certificate based on the security risk level of the IP address; and using the security risk level for the digital certificate in executing the one or more security policies. Other embodiments include corresponding computer systems, apparatus, and computer programs recorded on one or more computer storage devices.

    Using an Entity Behavior Catalog When Performing Distributed Security Operations

    公开(公告)号:US20210152567A1

    公开(公告)日:2021-05-20

    申请号:US17131023

    申请日:2020-12-22

    申请人: Forcepoint, LLC

    IPC分类号: H04L29/06

    摘要: A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes: monitoring an entity, the monitoring observing at least one electronically-observable data source; identifying a security related activity of the entity, the security related activity being of analytic utility; accessing an entity behavior catalog based upon the security related activity, the entity behavior catalog providing an inventory of entity behaviors; and performing a security operation via a distributed security analytics environment, the security operation using entity behavior catalog data stored within the entity behavior catalog based upon the security related activity.

    Maintaining User Privacy via a Distributed Framework for Security Analytics

    公开(公告)号:US20210112077A1

    公开(公告)日:2021-04-15

    申请号:US17131015

    申请日:2020-12-22

    申请人: Forcepoint, LLC

    IPC分类号: H04L29/06

    摘要: A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes: monitoring a plurality of actions of an entity, the plurality of actions of the entity corresponding to a plurality of events enacted by the entity; maintaining information relating to the monitoring within a user edge component; identifying an event of analytic utility; analyzing the event of analytic utility at the user edge component, the analyzing generating a security risk assessment; and, providing the security risk assessment to a network edge component.

    Cybersecurity system having digital certificate reputation system

    公开(公告)号:US11516206B2

    公开(公告)日:2022-11-29

    申请号:US16865176

    申请日:2020-05-01

    申请人: Forcepoint, LLC

    IPC分类号: H04L29/00 H04L9/40

    摘要: A system, method, and computer-readable medium are disclosed for implementing a cybersecurity system having a digital certificate reputation system. At least one embodiment is directed to a computer-implemented method executing operations including receiving a communication having an internet protocol (IP) address and a digital certificate at a device within the secured network; determining whether the IP address is identified as having a high-security risk level; if the IP address has a high-security risk level, assigning a security risk level to the digital certificate based on the security risk level of the IP address; and using the security risk level for the digital certificate in executing the one or more security policies. Other embodiments include corresponding computer systems, apparatus, and computer programs recorded on one or more computer storage devices.

    Distributed Framework for Security Analytics

    公开(公告)号:US20210112076A1

    公开(公告)日:2021-04-15

    申请号:US17131014

    申请日:2020-12-22

    申请人: Forcepoint, LLC

    IPC分类号: H04L29/06

    摘要: A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes: monitoring an entity, the monitoring observing at least one electronically-observable data source; identifying an event of analytic utility; analyzing the event of analytic utility, the analyzing the event of analytic utility identifying an entity behavior associated with the event of analytic utility; and, performing the security operation in response to the analyzing the event of analytic utility, where the monitoring, identifying, analyzing and performing are performed via a distributed security analytics framework.

    Cybersecurity system having security policy visualization

    公开(公告)号:US11895158B2

    公开(公告)日:2024-02-06

    申请号:US16878124

    申请日:2020-05-19

    申请人: Forcepoint, LLC

    摘要: A system, method, and computer-readable medium are disclosed for implementing a cybersecurity system having security policy visualization. At least one embodiment is directed to a computer-implemented method for implementing security policies in a secured network, including: retrieving a set of rules of a security policy; analyzing the set of rules of the security policy using one or more Satisfiability Modulo Theory (SMT) operations to reduce a dimensionality of the security policy; and generating a visual presentation on a user interface using results of the SMT operations, where the visual presentation includes visual indicia representing one or more targeted policy dimensions with respect to one or more fixed policy dimensions. In at least one embodiment, two or more security policies are presented with visual indicia representing differences between the security policies, including representations of one or more targeted policy dimensions with respect to one or more fixed policy dimensions.