中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

25 records (took 0.017 seconds)

    COMPLIANCE PROCESS RISK ASSESSMENT
    1.
    发明申请
    COMPLIANCE PROCESS RISK ASSESSMENT 有权

    公开(公告)号：US20210075814A1

    公开(公告)日：2021-03-11

    申请号：US16563504

    申请日：2019-09-06

    Applicant: International Business Machines Corporation

    Inventor： Muhammed Fatih Bulut ,  Milton H. Hernandez ,  Jinho Hwang ,  Constantin Mircea Adam ,  Daniel S. Riley

    IPC: H04L29/06 ,  G06N20/00

    Abstract: Systems, computer-implemented methods, and computer program products that can facilitate compliance process risk assessment are provided. According to an embodiment, a system can comprise a memory that stores computer executable components and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a metric assignment component that assigns one or more risk assessment metrics based on vulnerability data of a compliance process. The computer executable components can further comprise a risk assignment component that assigns a risk score of the compliance process based on the one or more risk assessment metrics.

    Compliance process risk assessment
    3.
    发明授权
    Compliance process risk assessment 有权

    公开(公告)号：US11411979B2

    公开(公告)日：2022-08-09

    申请号：US16563504

    申请日：2019-09-06

    Applicant: International Business Machines Corporation

    Inventor： Muhammed Fatih Bulut ,  Milton H. Hernandez ,  Jinho Hwang ,  Constantin Mircea Adam ,  Daniel S. Riley

    IPC: H04L29/00 ,  H04L9/40 ,  G06N20/00

    Abstract: Systems, computer-implemented methods, and computer program products that can facilitate compliance process risk assessment are provided. According to an embodiment, a system can comprise a memory that stores computer executable components and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a metric assignment component that assigns one or more risk assessment metrics based on vulnerability data of a compliance process. The computer executable components can further comprise a risk assignment component that assigns a risk score of the compliance process based on the one or more risk assessment metrics.

    VULNERABILITY AND ATTACK TECHNIQUE ASSOCIATION
    4.
    发明申请
    VULNERABILITY AND ATTACK TECHNIQUE ASSOCIATION 有权

    公开(公告)号：US20220131887A1

    公开(公告)日：2022-04-28

    申请号：US17078455

    申请日：2020-10-23

    Applicant: International Business Machines Corporation

    Inventor： Lilian Mathias Ngweta ,  Steven Ocepek ,  Constantin Mircea Adam ,  Sai Zeng ,  Muhammed Fatih Bulut ,  Milton H. Hernandez

    IPC: H04L29/06 ,  G06N20/00

    Abstract: Systems, computer-implemented methods, and computer program products that facilitate vulnerability and attack technique association are provided. According to an embodiment, a system can comprise a memory that stores computer executable components and a processor that executes the computer executable components stored in the memory. The computer executable components can comprise a map component that defines mappings between vulnerability data representing a vulnerability of a computing resource and attack data representing at least one attack technique. The computer executable components can further comprise an estimation component that analyzes the mappings to estimate a probability that the vulnerability will be exploited to attack the computing resource.

    Compliance-aware runtime generation based on application patterns and risk assessment
    6.
    发明授权
    Compliance-aware runtime generation based on application patterns and risk assessment 有权

    公开(公告)号：US10789368B2

    公开(公告)日：2020-09-29

    申请号：US15842534

    申请日：2017-12-14

    Applicant: International Business Machines Corporation

    Inventor： Constantin Mircea Adam ,  Nikolaos Anerousis ,  Jinho Hwang ,  Shripad Nadgowda ,  Maja Vukovic

    IPC: G06F21/53 ,  G06F21/57 ,  G06F21/56 ,  G06F21/71 ,  G06F21/54

    Abstract: Systems, computer-implemented methods and/or computer program products that facilitate compliance-aware runtime generation of containers are provided. In one embodiment, a computer-implemented method comprises: identifying, by a system operatively coupled to a processor, information used by a target application to containerize; determining whether one or more risk violations exist for the information within one or more defined thresholds; determining whether a compliance or a security violation exists in the information, wherein the determining whether the compliance or security violation exists is performed based on a determination by the risk assessment component that one or more risk violations do not exist; and generating a new container of components corresponding to defined components of the target application that allow the target application to execute without an underlying operating system, wherein the generating is based on a determination that no compliance or security violation exists in the information.

    PRIORITIZATION OF ATTACK TECHNIQUES AGAINST AN ORGANIZATION
    8.
    发明公开
    PRIORITIZATION OF ATTACK TECHNIQUES AGAINST AN ORGANIZATION 审中-公开

    公开(公告)号：US20240114046A1

    公开(公告)日：2024-04-04

    申请号：US17937854

    申请日：2022-10-04

    Applicant: International Business Machines Corporation

    Inventor： Constantin Mircea Adam ,  Muhammed Fatih Bulut ,  Steven Ocepek

    IPC: H04L9/40

    CPC classification number: H04L63/1433

    Abstract: One or more systems, devices, computer program products and/or computer-implemented methods provided herein relate to prioritization of attack techniques and cyber security events. According to an embodiment, an attack prioritization engine can receive security events, train an artificial intelligence model to rank respective cyber security events as a function of risk, and output a prioritization of security events to address. A mapping component can map asset vulnerabilities to attack techniques. A calculation component can calculate and aggregate scores for respective attack techniques. An attack surface component can extract features from the aggregation of scores to rank attack techniques and determine an attack surface. The mapping component can further map security events to the attack techniques.

Patent Agency Ranking