公开(公告)号：US10310877B2

公开(公告)日：2019-06-04

申请号：US15573112

申请日：2015-07-31

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Philipp Reinecke ,  Brian Quentin Monahan ,  Granville Barnett ,  Patrick Goldsack

IPC: G06F8/41 ,  G06F8/70 ,  G06F9/455 ,  G06F9/48 ,  G06F11/30 ,  G06F11/34 ,  G06F11/36

Abstract: Examples analyze source code of a task prior to compiling the source code to determine a static property of the task. Examples determine a category for the task based at least in part on the static property. Examples compile the source code to generate a binary of the task. Examples determine execution parameters for the task based at least in part on the category. Examples schedule the binary for execution based at least in part on the execution parameters.

公开(公告)号：US20180004941A1

公开(公告)日：2018-01-04

申请号：US15201186

申请日：2016-07-01

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Philipp Reinecke ,  Marco Casassa Mont ,  Yolanta Beresna

IPC: G06F21/55 ,  G06F17/30 ,  G06F21/57 ,  G06N5/02

CPC classification number: G06F21/55 ,  G06F17/30979 ,  G06F21/56 ,  G06F21/566 ,  G06F21/577 ,  G06F2221/034 ,  G06N5/02 ,  H04L63/1408 ,  H04L63/1416 ,  H04L63/1425

Abstract: Examples relate to model-based computer attack analytics orchestration. In one example, a computing device may: generate, using an attack model that specifies behavior of a particular attack on a computing system, a hypothesis for the particular attack, the hypothesis specifying, for a particular state of the particular attack, at least one attack action; identify, using the hypothesis, at least one analytics function for determining whether the at least one attack action specified by the hypothesis occurred on the computing system; provide an analytics device with instructions to execute the at least one analytics function on the computing system; receive analytics results from the analytics device; and update a state of the attack model based on the analytics results.

公开(公告)号：US20180253362A1

公开(公告)日：2018-09-06

申请号：US15447417

申请日：2017-03-02

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Kate Elizabeth Reinecke ,  Philipp Reinecke ,  Stephen James Crane

IPC: G06F11/14 ,  G06F9/455

CPC classification number: G06F11/1471 ,  G06F9/45558 ,  G06F11/0793 ,  G06F11/1438 ,  G06F11/1458 ,  G06F2009/45575 ,  G06F2009/45587 ,  G06F2201/805 ,  G06F2201/815

Abstract: Example implementations relate to capturing and/or recovering components of a computing system. A recovery service may receive a recovery script from an external recovery script repository, wherein the recovery script may include a number of actions, each respective action being a capture action or a recovery action. For action in the recovery script, the recovery service may request a recovery agent to perform the action on a component of the computing system.

公开(公告)号：US10331528B2

公开(公告)日：2019-06-25

申请号：US15447417

申请日：2017-03-02

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Kate Elizabeth Reinecke ,  Philipp Reinecke ,  Stephen James Crane

IPC: G06F11/00 ,  G06F11/14 ,  G06F11/07 ,  G06F9/455

Abstract: Example implementations relate to capturing and/or recovering components of a computing system. A recovery service may receive a recovery script from an external recovery script repository, wherein the recovery script may include a number of actions, each respective action being a capture action or a recovery action. For action in the recovery script, the recovery service may request a recovery agent to perform the action on a component of the computing system.

公开(公告)号：US10262132B2

公开(公告)日：2019-04-16

申请号：US15201186

申请日：2016-07-01

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Philipp Reinecke ,  Marco Casassa Mont ,  Yolanta Beresna

IPC: G06F11/00 ,  G06F21/55 ,  G06F16/903 ,  G06F21/56 ,  H04L29/06 ,  G06F17/30 ,  G06F21/57 ,  G06N5/02 ,  G06F12/14

Abstract: Examples relate to model-based computer attack analytics orchestration. In one example, a computing device may: generate, using an attack model that specifies behavior of a particular attack on a computing system, a hypothesis for the particular attack, the hypothesis specifying, for a particular state of the particular attack, at least one attack action; identify, using the hypothesis, at least one analytics function for determining whether the at least one attack action specified by the hypothesis occurred on the computing system; provide an analytics device with instructions to execute the at least one analytics function on the computing system; receive analytics results from the analytics device; and update a state of the attack model based on the analytics results.

公开(公告)号：US20180219884A1

公开(公告)日：2018-08-02

申请号：US15418458

申请日：2017-01-27

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Yolanta Beresna ,  Marco Casassa Mont ,  Philipp Reinecke

IPC: H04L29/06

CPC classification number: H04L63/1425 ,  G06F21/55

Abstract: Example implementations relate to changing deployment statuses. An example implementation includes updating a data source data store comprising descriptors of available data sources, a pre-processor data store comprising descriptors of available pre-processors, or an analytic data store comprising descriptors of available analytics. A change request may be initiated responsive to a change in the data source data, pre-processor data, or analytic data and a deployment status of a pre-processor or an analytic may be changed responsive to the change request.

公开(公告)号：US20180004958A1

公开(公告)日：2018-01-04

申请号：US15201171

申请日：2016-07-01

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Philipp Reinecke ,  Marco Casassa Mont ,  Yolanta Beresna

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F21/566 ,  G06F2221/034 ,  H04L63/145 ,  H04L2463/144

Abstract: Examples relate to computer attack model management. In one example, a computing device may: identify a first set of attack models, each attack model in the first set specifying behavior of a particular attack on a computing system; obtain, for each attack model in the first set, performance data that indicates at least one measure of attack model performance for a previous use of the attack model in determining whether the particular attack occurred on the computing system; and update the first set of attack models based on the performance data.