Anomaly alert system for cyber threat detection

    公开(公告)号:US12126636B2

    公开(公告)日:2024-10-22

    申请号:US17137193

    申请日:2020-12-29

    CPC classification number: H04L63/1425 G06F21/552 H04L63/1441

    Abstract: Disclosed herein is a method for use in detection of anomalous behavior of a device of a computer system. The method is arranged to be performed by a processing system. The method includes deriving values, m1, . . . , mN, of a metric, M, representative of data associated with the device; modeling a distribution of the values; and determining, in accordance with the distribution of the values, the probability of observing a more extreme value of the metric than a given value, in, of the metric, wherein the probability is used to determine whether the device is behaving anomalously. Also disclosed is an equivalent computer readable medium and anomalous behavior detection system.

    AI-ENHANCED SIMULATION AND MODELING EXPERIMENTATION AND CONTROL

    公开(公告)号:US20240348663A1

    公开(公告)日:2024-10-17

    申请号:US18754140

    申请日:2024-06-25

    Applicant: QOMPLX LLC

    Abstract: An artificial intelligence-driven simulation and decision platform for reducing epistemic uncertainty in complex systems. The system integrates advanced techniques from artificial intelligence, simulation, and uncertainty quantification to generate and run scenarios, monitor progress, and adjust parameters in real-time to achieve user-defined goals. The simulation and decision platform comprises an AI system that employs natural language processing, reinforcement learning, and multi-objective optimization; a continuous and scalable simulation environment; scenario generation and guidance that provides human-readable scenario guides and contextual explanations; and an uncertainty quantification and reduction that employs entropy-based methods and Bayesian inference. The system allows users to define goals and objectives for their simulations, and the AI component generates and optimizes scenarios to achieve these goals while reducing epistemic uncertainty. The simulation and decision platform is designed to be flexible and adaptable to various domains and applications, providing a comprehensive and user-friendly solution for managing complex systems under uncertainty.

    Monitoring and preventing remote user automated cyber attacks

    公开(公告)号:US12120143B2

    公开(公告)日:2024-10-15

    申请号:US18197763

    申请日:2023-05-16

    Inventor: Patrick Lewis

    Abstract: Aspects of the disclosure relate to monitoring virtual desktops accessed by devices at remote locations using machine-learning models to mitigate potential cyber-attacks. In some embodiments, a computing platform may monitor data associated with a series of activities from a virtual desktop accessed by a remote computing device. Subsequently, the computing platform may detect new activity data on the virtual desktop accessed by the remote computing device, and evaluate the new activity data relative to the data associated with the series of activities, wherein evaluating includes applying a machine learning model to the new activity data. Based on evaluating the new activity data, the computing platform may determine if the new activity data is indicative of a potential cyber-attack. In response to determining that the new activity data is indicative of a potential cyber-attack, the computing platform may initiate one or more security response actions.

    METHOD AND SYSTEM FOR PROVIDING DNS SECURITY USING PROCESS INFORMATION

    公开(公告)号:US20240323206A1

    公开(公告)日:2024-09-26

    申请号:US18734883

    申请日:2024-06-05

    CPC classification number: H04L63/1416 H04L63/1441

    Abstract: Domain Name System (DNS) security using process information is provided. An application accessing an internet service using a domain name is determined. Process information associated with the application along with an associated DNS query to identify an IP address associated with the domain name are identified. The process information and the associated DNS query to a DNS security service are sent. An action based on a response from the DNS security service is performed.

    APPARATUSES, COMPUTER-IMPLEMENTED METHODS, AND COMPUTER PROGRAM PRODUCTS FOR IMPROVED REMOTE ACCESS CYBERSECURITY

    公开(公告)号:US20240323199A1

    公开(公告)日:2024-09-26

    申请号:US18187126

    申请日:2023-03-21

    CPC classification number: H04L63/1416 H04L63/1441 H04L63/20

    Abstract: Embodiments of the present disclosure provide for remote access of a device, for example an operational technology device or an information technology device, in a manner with improved cybersecurity. Some embodiments receive remote action data from a client device in response to an initiated remote access action of the remote action data from the client device to a remotely accessible device, quarantine the remote action data from the client device, generate malicious determination data indicating whether the remote action data is determined as malicious by processing the remote action data, and determine whether to block transfer of the remote action data to the remotely accessible device based at least in part on the malicious determination data.

Patent Agency Ranking