公开(公告)号：US11240263B2

公开(公告)日：2022-02-01

申请号：US15420521

申请日：2017-01-31

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Pratyusa K. Manadhata ,  William G. Horne ,  Tomas Sander ,  Manish Marwah ,  Tomasz Jaroslaw Bania

IPC: H04L29/06

Abstract: In some examples, an alert relating to an issue in a computing arrangement is received. It is determined that the received alert is similar to a given alert in an information repository containing information of past processes performed to address respective issues, the determining comprising comparing a property associated with the received alert to a property of alerts associated with the past processes, and the information contained in the information repository comprising actions taken in the past processes to address the respective issues. Performance of a remediation action is triggered that comprises an action, identified by the information in the information repository, taken to respond to the given alert.

公开(公告)号：US20180219911A1

公开(公告)日：2018-08-02

申请号：US15420521

申请日：2017-01-31

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Pratyusa K. Manadhata ,  William G. Horne ,  Tomas Sander ,  Manish Marwah ,  Tomasz Jaroslaw Bania

IPC: H04L29/06

CPC classification number: H04L63/1441 ,  H04L63/1416 ,  H04L63/20

Abstract: In some examples, an alert relating to an issue in a computing arrangement is received. It is determined that the received alert is similar to a given alert in an information repository containing information of past processes performed to address respective issues, the determining comprising comparing a property associated with the received alert to a property of alerts associated with the past processes, and the information contained in the information repository comprising actions taken in the past processes to address the respective issues. Performance of a remediation action is triggered that comprises an action, identified by the information in the information repository, taken to respond to the given alert.

公开(公告)号：US20180219875A1

公开(公告)日：2018-08-02

申请号：US15420417

申请日：2017-01-31

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Tomasz Jaroslaw Bania ,  William G. Horne ,  Renato Keshet ,  Pratyusa K. Manadhata ,  Manish Marwah ,  Brent James Miller ,  Barak Raz ,  Tomas Sander

IPC: H04L29/06

CPC classification number: H04L63/14 ,  H04L63/1416 ,  H04L63/1425 ,  H04L63/20

Abstract: In some examples, a plurality of alerts relating to issues in a computing arrangement are received, where the plurality of alerts generated based on events in the computing arrangement. A subset of the plurality of alerts is grouped into a bundle of alerts, the grouping being based on a criterion. The bundle of alerts is communicated to cause processing of the alerts in the bundle of alerts together.

公开(公告)号：US11240256B2

公开(公告)日：2022-02-01

申请号：US15420417

申请日：2017-01-31

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Tomasz Jaroslaw Bania ,  William G. Horne ,  Renato Keshet ,  Pratyusa K. Manadhata ,  Manish Marwah ,  Brent James Miller ,  Barak Raz ,  Tomas Sander

IPC: G06F21/00 ,  H04L29/06

Abstract: In some examples, a plurality of alerts relating to issues in a computing arrangement are received, where the plurality of alerts generated based on events in the computing arrangement. A subset of the plurality of alerts is grouped into a bundle of alerts, the grouping being based on a criterion. The bundle of alerts is communicated to cause processing of the alerts in the bundle of alerts together.

公开(公告)号：US11218497B2

公开(公告)日：2022-01-04

申请号：US15437230

申请日：2017-02-20

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Tomasz Jaroslaw Bania ,  William G. Horne ,  Pratyusa K. Manadhata ,  Tomas Sander

IPC: H04L29/06

Abstract: A technique includes determining relations among a plurality of entities that are associated with a computer system; and selectively grouping behavior anomalies that are exhibited by the plurality of entities into collections based at least in part on the determined relations among the entities. The technique includes selectively reporting the collections to a security operations center.

公开(公告)号：US20180241761A1

公开(公告)日：2018-08-23

申请号：US15437230

申请日：2017-02-20

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Tomasz Jaroslaw Bania ,  William G. Horne ,  Pratyusa K. Manadhata ,  Tomas Sander

IPC: H04L29/06

CPC classification number: H04L63/1425

Abstract: A technique includes determining relations among a plurality of entities that are associated with a computer system; and selectively grouping behavior anomalies that are exhibited by the plurality of entities into collections based at least in part on the determined relations among the entities. The technique includes selectively reporting the collections to a security operations center.