CYBERSECURITY MATURITY FORECASTING TOOL/DASHBOARD

    公开(公告)号:WO2018204046A1

    公开(公告)日:2018-11-08

    申请号:PCT/US2018/027278

    申请日:2018-04-12

    Applicant: DIGNITY HEALTH

    Abstract: Systems and methods of the present invention provide for executing a first database query selecting a project objective data record storing a forecast maturity score and a forecast date earlier in time than a current date. The forecast maturity score defines a level of compliance with a cybersecurity framework and the forecast date identifies a date by which an organization will achieve the level of compliance. The system executes a remote procedure call to determine whether a system process is performing a project objective defined within the project objective data record, and responsive to a determination that the system process is not performing the project objective, execute a second database query updating the forecast date within the project objective data record.

    一种软件定义网络的DDoS攻击模拟和攻击检测方法及装置

    公开(公告)号:WO2018201581A1

    公开(公告)日:2018-11-08

    申请号:PCT/CN2017/088934

    申请日:2017-06-19

    Applicant: 深圳大学

    CPC classification number: H04L63/1408 H04L63/1458 H04L63/1483 H04L2463/144

    Abstract: 本发明适用网络安全技术领域,提供了一种软件定义网络的DDoS攻击模拟和攻击检测方法及装置,所述方法包括:通过线性递增和增量模式的方式增加僵尸主机,通过所有僵尸主机向软件定义网络中预设的目标交换机发起数据平面的隐蔽性DDoS攻击,根据软件定义网络中所有交换机上流表的更新,对软件定义网络的控制器上预先构建的攻击流监控表进行同步更新,对攻击流监控表进行周期性检测,以确定攻击流监控表中是否有存在时长超过预设时长的监控表项,当存在时,确定该监控表项对应网络流为针对软件定义网络数据平面的隐蔽攻击流,从而有效地提高了模拟软件定义网络数据平面隐蔽性DDoS攻击的效率,有效地提高了软件定义网络数据平面隐蔽性DDoS攻击的检测效率。

    DARK VIRTUAL PRIVATE NETWORKS AND SECURE SERVICES
    5.
    发明申请
    DARK VIRTUAL PRIVATE NETWORKS AND SECURE SERVICES 审中-公开
    黑暗的虚拟私人网络和安全服务

    公开(公告)号:WO2018075965A1

    公开(公告)日:2018-04-26

    申请号:PCT/US2017/057726

    申请日:2017-10-20

    Applicant: ISONETIC, INC.

    Abstract: Provided herein are systems and methods for establishing secure communications and connectivity between agents (client, user, or service) over any physical network topology. The system allows clients (client, user, or service agents) to connect to services in a secure manner reducing risks from third party trust attacks, denial-of-service, and anonymous attacks (either zero-day or using known vulnerabilities) while simultaneously improving the performance of the connectivity.

    Abstract translation: 本文提供了用于通过任何物理网络拓扑在代理(客户端,用户或服务)之间建立安全通信和连接的系统和方法。 该系统允许客户端(客户端,用户或服务代理)以安全的方式连接到服务,同时减少来自第三方信任攻击,拒绝服务和匿名攻击(零日或使用已知漏洞)的风险,同时 提高连接性能。

    网络攻击防御方法、装置以及系统

    公开(公告)号:WO2018059480A1

    公开(公告)日:2018-04-05

    申请号:PCT/CN2017/103934

    申请日:2017-09-28

    Inventor: 张浩浩

    Abstract: 本申请提供了一种网络攻击防御方法、装置和系统,本申请的方案中,旁路检查设备截获向目标服务器发送的访问请求,并将发送该访问请求的客户端重定向到目标验证服务器,以通过目标验证服务器对该客户端进行验证码验证;当确定出目标验证服务器对客户端验证通过时,才将该客户端发送的访问请求转发给目标服务器。本申请的方法无需为服务系统中的各台服务器分别部署验证码验证机制,便可以防御DDoS攻击等恶意攻击服务系统的行为,有利于降低防御DDoS攻击的复杂度。。

    CLUSTERING APPROACH FOR DETECTING DDOS BOTNETS ON THE CLOUD FROM IPFIX DATA
    7.
    发明申请
    CLUSTERING APPROACH FOR DETECTING DDOS BOTNETS ON THE CLOUD FROM IPFIX DATA 审中-公开
    IPFIX数据云检测DDOS蠕虫的聚类方法

    公开(公告)号:WO2018044659A1

    公开(公告)日:2018-03-08

    申请号:PCT/US2017/048297

    申请日:2017-08-24

    Abstract: Use machine learning to train a classifier to classify entities to increase confidence with respect to an entity being part of a distributed denial of service attack. The method includes training a classifier to use a first classification method, to identify probabilities that entities from a set of entities are performing denial of service attacks. The method further includes identifying a subset of entities meeting a threshold probability of performing a denial of service attack. The method further includes using a second classification method, identifying similarity of entities in the subset of entities. The method further includes based on the similarity, classifying individual entities.

    Abstract translation: 使用机器学习来训练分类器来对实体进行分类,以增加对作为分布式拒绝服务攻击的一部分的实体的置信度。 该方法包括训练分类器以使用第一分类方法来识别来自一组实体的实体正在执行拒绝服务攻击的概率。 该方法还包括识别满足执行拒绝服务攻击的阈值概率的实体的子集。 该方法还包括使用第二分类方法,识别实体子集中实体的相似性。 该方法还包括基于相似性,对各个实体进行分类。

    COMPUTERIZED SYSTEM AND METHOD FOR PROVIDING CYBERSECURITY DETECTION AND RESPONSE FUNCTIONALITY
    8.
    发明申请
    COMPUTERIZED SYSTEM AND METHOD FOR PROVIDING CYBERSECURITY DETECTION AND RESPONSE FUNCTIONALITY 审中-公开
    提供检测和响应功能的计算机系统和方法

    公开(公告)号:WO2018013798A1

    公开(公告)日:2018-01-18

    申请号:PCT/US2017/041914

    申请日:2017-07-13

    Abstract: Disclosed are systems and methods for improving interactions with and between computers in a search system supported by or configured with search servers, applications or platforms. The systems interact to identify and retrieve data across platforms, which data can be used to improve the quality of results data used in processing interactions between or among processors in such systems. The disclosed systems and methods provide an incident management and response software (IMRS) system that accelerates security incident detection and response. The IMRS provides an adaptive, event-driven workflow automation platform that can be customized to suit a large range of infrastructure environments and asset classes. The IMRS encompasses the management, automation and orchestration technologies applied in the detection and remediation of a computer network security incident (e.g., malware, advanced persistent threat, insider crime, denial of service attack, and the like).

    Abstract translation: 公开了用于改进搜索系统中与计算机之间的交互的系统和方法,该系统和方法由搜索服务器,应用程序或平台支持或者配置有搜索服务器,应用程序或平台。 这些系统通过交互来识别和检索跨平台的数据,这些数据可以用来提高用于处理这些系统中处理器之间或之中的交互的结果数据的质量。 所公开的系统和方法提供了加速安全事件检测和响应的事件管理和响应软件(IMRS)系统。 IMRS提供了一个自适应的,事件驱动的工作流自动化平台,可以进行定制以适应大范围的基础设施环境和资产类别。 IMRS包含用于检测和修复计算机网络安全事件(例如,恶意软件,高级持续威胁,内部犯罪,拒绝服务攻击等)的管理,自动化和编排技术。

    一种数据处理方法、装置及系统
    9.
    发明申请

    公开(公告)号:WO2017190623A1

    公开(公告)日:2017-11-09

    申请号:PCT/CN2017/082174

    申请日:2017-04-27

    Abstract: 本申请提供了一种数据处理方法、装置及系统,其中系统包括一种数据处理系统,包括:终端、网络设备、清洗系统和至少一个设有安全网关的网站服务器;所述清洗系统,用于接收所述网络设备发送的目标数据报文,对所述目标数据报文进行清洗,并将清洗后的正常报文发送至目标网站服务器。本申请使得访问目标网站服务器的大量数据报文不再经过网络设备与安全网关之间的网络链路,而是流经网络设备与清洗系统之间的网络链路,再由清洗设备将清洗后的正常报文转发至目标网站服务器。因此,本申请可以在不更改网络设备与安全网关之间互联网带宽的前提下,解决攻击设备向目标网站服务器发起的DDoS攻击的问题。

    STATELESS ACCESS STRATUM SECURITY FOR CELLULAR INTERNET OF THINGS
    10.
    发明申请
    STATELESS ACCESS STRATUM SECURITY FOR CELLULAR INTERNET OF THINGS 审中-公开
    用于无线蜂窝互联网的无状态接入层安全

    公开(公告)号:WO2017112491A3

    公开(公告)日:2017-08-03

    申请号:PCT/US2016066702

    申请日:2016-12-14

    Applicant: QUALCOMM INC

    Abstract: Aspects of security schemes (e.g., integrity protection, encryption, or both) are described. A measure of access stratum security can be realized without overhead associated with establishing and/or maintaining the per-cellular-device access stratum security context at a Cellular Internet of Things (CIoT) base station (C-BS). A gateway (e.g., a CIoT Serving Gateway Node (C-SGN)) may derive a first key. The first key may be only known to the C-SGN. The C-SGN may derive a second key from the first key and a parameter unique to the C-BS. The C-SGN may also derive a third key from the second key and an identity of a cellular device. The C-SGN may send the second and third keys to the C-BS and cellular device, respectively. Small data messages encrypted and/or integrity protected by the cellular device may be decrypted and/or verified by the C-BS.

    Abstract translation: 描述了安全方案的各个方面(例如,完整性保护,加密或二者)。 可以在无蜂窝物联网(C-BS)基站(C-BS)上建立和/或维护每个蜂窝设备接入层安全上下文的开销的情况下实现接入层安全性的度量。 网关(例如,CIoT服务网关节点(C-SGN))可以导出第一密钥。 第一把钥匙可能只有C-SGN才知道。 C-SGN可以从第一密钥和C-BS特有的参数中导出第二密钥。 C-SGN还可以从第二密钥和蜂窝设备的身份导出第三密钥。 C-SGN可以分别将第二和第三密钥发送到C-BS和蜂窝设备。 由蜂窝设备加密和/或完整性保护的小数据消息可以由C-BS解密和/或验证。

Patent Agency Ranking