专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20170310697A1 NETWORK ANOMALY DETECTION 有权
公开(公告)号：US20170310697A1
公开(公告)日：2017-10-26
申请号：US15647979
申请日：2017-07-12
申请人： Accenture Global Services Limited
发明人： Michael L. Lefebvre , Matthew Carver , Eric Ellett , Walid Negm , Louis William DiValentin , James J. Solderitsch
IPC分类号： H04L29/06 , H04L12/26 , H04L12/24 , H04W12/08 , G06F21/56
CPC分类号： H04L63/1425 , G06F21/566 , H04L41/12 , H04L41/22 , H04L43/04 , H04L43/0888 , H04L43/0894 , H04L63/1466 , H04W12/08
摘要： Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining network related anomaly scores. One of the methods includes generating a network map including at least a plurality of network nodes and a plurality of edges that indicate communications paths between the plurality of network nodes, obtaining first data indicating network activity over the edges and between the plurality of network nodes for a first time period, generating a model of expected network activity over the edges and between the plurality of network nodes for a future time period using the network map and the first data, obtaining second data indicating network activity over the edges and between the plurality of network nodes for a second time period, and determining an anomaly score using a comparison between the second data and the model of expected network activity.

2. 发明授权

US10009366B2 Network anomaly detection 有权
公开(公告)号：US10009366B2
公开(公告)日：2018-06-26
申请号：US15647979
申请日：2017-07-12
申请人： Accenture Global Services Limited
发明人： Michael L. Lefebvre , Matthew Carver , Eric Ellett , Walid Negm , Louis William DiValentin , James J. Solderitsch
IPC分类号： H04L29/06 , H04L12/26 , H04W12/08 , G06F21/56 , H04L12/24
CPC分类号： H04L63/1425 , G06F21/566 , H04L41/12 , H04L41/22 , H04L43/04 , H04L43/0888 , H04L43/0894 , H04L63/1466 , H04W12/08
摘要： Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining network related anomaly scores. One of the methods includes generating a network map including at least a plurality of network nodes and a plurality of edges that indicate communications paths between the plurality of network nodes, obtaining first data indicating network activity over the edges and between the plurality of network nodes for a first time period, generating a model of expected network activity over the edges and between the plurality of network nodes for a future time period using the network map and the first data, obtaining second data indicating network activity over the edges and between the plurality of network nodes for a second time period, and determining an anomaly score using a comparison between the second data and the model of expected network activity.

3. 发明申请

US20160085972A1 INDUSTRIAL SECURITY AGENT PLATFORM 有权
标题翻译：工业安全代理平台
公开(公告)号：US20160085972A1
公开(公告)日：2016-03-24
申请号：US14839331
申请日：2015-08-28
申请人： Accenture Global Services Limited
发明人： Song Luo , Walid Negm , James J. Solderitsch , Shaan Mulchandani , Amin Hassanzadeh , Shimon Modi
IPC分类号： G06F21/60 , H04L9/08 , H04L29/06
CPC分类号： G06F21/602 , H04L9/0894 , H04L63/0209 , H04L63/08 , H04L63/10 , H04L63/20 , H04L2209/76
摘要： Systems, methods, and apparatus, including computer programs encoded on computer storage media, for facilitating communication in an industrial control network. A system includes an industrial control network, one or more controller devices, one or more emulators, and an encryption relay processor. Each controller device can be operable to control one or more operational devices connected to the industrial control network. Each emulator can be configured to communicate with a respective controller device, and each emulator can be configured to reference a respective profile that includes information about security capabilities of the respective controller device. The encryption relay processor can be operable to facilitate communication to and from each emulator over the industrial control network. The encryption relay processor can execute a cryptographic function for a communication between the emulator and a node on the industrial control network when the respective controller device is incapable of performing the cryptographic function.
摘要翻译：系统，方法和装置，包括在计算机存储介质上编码的计算机程序，用于促进工业控制网络中的通信。系统包括工业控制网络，一个或多个控制器设备，一个或多个仿真器和加密中继处理器。每个控制器设备可操作以控制连接到工业控制网络的一个或多个操作设备。每个仿真器可被配置为与相应的控制器设备进行通信，并且每个仿真器可被配置为引用包括关于相应控制器设备的安全性能的信息的相应简档。加密中继处理器可以可操作以便于通过工业控制网络与每个仿真器进行通信。当相应的控制器设备不能执行加密功能时，加密中继处理器可以执行用于仿真器与工业控制网络上的节点之间的通信的加密功能。

4. 发明授权

US09369481B2 Incident triage engine 有权
标题翻译：事故分流引擎
公开(公告)号：US09369481B2
公开(公告)日：2016-06-14
申请号：US14247322
申请日：2014-04-08
申请人： Accenture Global Services Limited
发明人： Joshua Z. Howes , Walid Negm , James J. Solderitsch , Ashish Jotwani , Matthew Carver
IPC分类号： G06F11/00 , H04L29/06 , G06F21/57 , G06Q10/10 , G06F21/55
CPC分类号： H04L63/1433 , G06F21/554 , G06F21/577 , G06Q10/10 , H04L63/1416
摘要： An incident triage engine performs incident triage in a system by prioritizing responses to incidents within the system. One prioritization method may include receiving attributes of incidents and assets in the system, generating cumulative loss forecasts for the incidents, and prioritizing the responses to the incidents based on the cumulative loss forecasts for the incidents. Another prioritization method may include determining different arrangements of incidents within a response queue, calculating cumulative queue loss forecasts for the different arrangements of incidents within the response queue, and arranging the incidents in the response queue based on the arrangement of incidents that minimizes the total loss to the system over the resolution of all of the incidents present in the response queue.
摘要翻译：事件分类引擎通过对系统内事件的响应进行优先排序来对系统进行事件分类。一种优先化方法可以包括接收系统中的事件和资产的属性，生成事件的累积损失预测，并根据事件的累积损失预测对事件的响应进行优先级排序。另一个优先化方法可以包括确定响应队列内的事件的不同布置，计算响应队列内的事件的不同布置的累积队列丢失预测，以及基于最小化总损失的事件的布置将事件排列在响应队列中到系统解决所有响应队列中出现的事件。

5. 发明申请

US20160352768A1 NETWORK ANOMALY DETECTION 有权
公开(公告)号：US20160352768A1
公开(公告)日：2016-12-01
申请号：US15235247
申请日：2016-08-12
申请人： Accenture Global Services Limited
发明人： Michael L. Lefebvre , Matthew Carver , Eric Ellett , Walid Negm , Louis William DiValentin , James J. Solderitsch
IPC分类号： H04L29/06 , H04L12/24 , H04L12/26
CPC分类号： H04L63/1425 , G06F21/566 , H04L41/12 , H04L41/22 , H04L43/04 , H04L43/0888 , H04L43/0894 , H04L63/1466 , H04W12/08
摘要： Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining network related anomaly scores. One of the methods includes generating a network map including at least a plurality of network nodes and a plurality of edges that indicate communications paths between the plurality of network nodes, obtaining first data indicating network activity over the edges and between the plurality of network nodes for a first time period, generating a model of expected network activity over the edges and between the plurality of network nodes for a future time period using the network map and the first data, obtaining second data indicating network activity over the edges and between the plurality of network nodes for a second time period, and determining an anomaly score using a comparison between the second data and the model of expected network activity.

6. 发明授权

US09503467B2 Network anomaly detection 有权
标题翻译：网络异常检测
公开(公告)号：US09503467B2
公开(公告)日：2016-11-22
申请号：US14285487
申请日：2014-05-22
申请人： Accenture Global Services Limited
发明人： Michael J. Lefebvre , Matthew Carver , Eric Ellett , Walid Negm , Louis William DiValentin , James J. Solderitsch
IPC分类号： H04L29/06 , H04L12/26 , H04W12/08 , G06F21/56 , H04L12/24
CPC分类号： H04L63/1425 , G06F21/566 , H04L41/12 , H04L41/22 , H04L43/04 , H04L43/0888 , H04L43/0894 , H04L63/1466 , H04W12/08
摘要： Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining network related anomaly scores. One of the methods includes generating a network map including at least a plurality of network nodes and a plurality of edges that indicate communications paths between the plurality of network nodes, obtaining first data indicating network activity over the edges and between the plurality of network nodes for a first time period, generating a model of expected network activity over the edges and between the plurality of network nodes for a future time period using the network map and the first data, obtaining second data indicating network activity over the edges and between the plurality of network nodes for a second time period, and determining an anomaly score using a comparison between the second data and the model of expected network activity.
摘要翻译：方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于确定网络相关异常得分。所述方法之一包括生成包括至少多个网络节点和指示多个网络节点之间的通信路径的多个边缘的网络地图，获得指示边缘之间和多个网络节点之间的网络活动的第一数据，用于第一时间段，使用所述网络地图和所述第一数据在未来时间段内生成边缘上和所述多个网络节点之间的期望网络活动的模型，获得指示所述边缘上和所述多个网络节点之间的网络活动的第二数据网络节点，并且使用第二数据和预期网络活动的模型之间的比较来确定异常得分。

7. 发明申请

US20160087958A1 INDUSTRIAL SECURITY AGENT PLATFORM 有权
标题翻译：工业安全代理平台
公开(公告)号：US20160087958A1
公开(公告)日：2016-03-24
申请号：US14839123
申请日：2015-08-28
申请人： Accenture Global Services Limited
发明人： Song Luo , Walid Negm , James J. Solderitsch , Shaan Mulchandani , Amin Hassanzadeh , Shimon Modi
IPC分类号： H04L29/06
CPC分类号： G06F21/602 , H04L9/0894 , H04L63/0209 , H04L63/08 , H04L63/10 , H04L63/20 , H04L2209/76
摘要： Systems, methods, and apparatus, including computer programs encoded on computer storage media, for facilitating secure communication. A system for facilitating secure communication includes an enterprise network, one or more operational technology networks, and a management server. Each of the operational technology networks can include one or more controller devices operable to control one or more operational devices, and can include a respective site security server and a respective security relay server. The security relay server can be operable to facilitate secure communication between controller devices of the operational technology network and its corresponding site security server. The management server can be a node on the enterprise network and can be operable to communicate with each site security server.
摘要翻译：系统，方法和装置，包括在计算机存储介质上编码的计算机程序，用于促进安全通信。用于促进安全通信的系统包括企业网络，一个或多个操作技术网络和管理服务器。每个操作技术网络可以包括可操作以控制一个或多个操作设备的一个或多个控制器设备，并且可以包括相应的站点安全服务器和相应的安全中继服务器。安全中继服务器可以操作以便于操作技术网络的控制器设备与其对应的站点安全服务器之间的安全通信。管理服务器可以是企业网络上的一个节点，可以与每个站点安全服务器进行通信。

8. 发明申请

US20150341379A1 NETWORK ANOMALY DETECTION 有权
标题翻译：网络异常检测
公开(公告)号：US20150341379A1
公开(公告)日：2015-11-26
申请号：US14285487
申请日：2014-05-22
申请人： Accenture Global Services Limited
发明人： Michael L. Lefebvre , Matthew Carver , Eric Ellett , Walid Negm , Louis William DiValentin , James J. Solderitsch
IPC分类号： H04L29/06 , H04W12/08 , H04L12/26
CPC分类号： H04L63/1425 , G06F21/566 , H04L41/12 , H04L41/22 , H04L43/04 , H04L43/0888 , H04L43/0894 , H04L63/1466 , H04W12/08
摘要： Methods, systems, and apparatus, including computer programs encoded on computer storage media, for determining network related anomaly scores. One of the methods includes generating a network map including at least a plurality of network nodes and a plurality of edges that indicate communications paths between the plurality of network nodes, obtaining first data indicating network activity over the edges and between the plurality of network nodes for a first time period, generating a model of expected network activity over the edges and between the plurality of network nodes for a future time period using the network map and the first data, obtaining second data indicating network activity over the edges and between the plurality of network nodes for a second time period, and determining an anomaly score using a comparison between the second data and the model of expected network activity.
摘要翻译：方法，系统和装置，包括在计算机存储介质上编码的计算机程序，用于确定网络相关异常得分。所述方法之一包括生成包括至少多个网络节点和指示多个网络节点之间的通信路径的多个边缘的网络地图，获得指示边缘之间和多个网络节点之间的网络活动的第一数据，用于第一时间段，使用所述网络地图和所述第一数据在未来时间段内生成边缘上和所述多个网络节点之间的期望网络活动的模型，获得指示所述边缘上和所述多个网络节点之间的网络活动的第二数据网络节点，并且使用第二数据和预期网络活动的模型之间的比较来确定异常得分。

9. 发明授权

US10824736B2 Industrial security agent platform 有权
公开(公告)号：US10824736B2
公开(公告)日：2020-11-03
申请号：US15822824
申请日：2017-11-27
申请人： Accenture Global Services Limited
发明人： Song Luo , Walid Negm , James J. Solderitsch , Shaan Mulchandani , Amin Hassanzadeh , Shimon Modi
IPC分类号： H04L29/06 , G06F21/60 , H04L9/08
摘要： Systems, methods, and apparatus, including computer programs encoded on computer storage media, for facilitating communication in an industrial control network. A system includes an industrial control network, one or more controller devices, one or more emulators, and an encryption relay processor. Each controller device can be operable to control one or more operational devices connected to the industrial control network. Each emulator can be configured to communicate with a respective controller device, and each emulator can be configured to reference a respective profile that includes information about security capabilities of the respective controller device. The encryption relay processor can be operable to facilitate communication to and from each emulator over the industrial control network. The encryption relay processor can execute a cryptographic function for a communication between the emulator and a node on the industrial control network when the respective controller device is incapable of performing the cryptographic function.

10. 发明申请

US20180144144A1 INDUSTRIAL SECURITY AGENT PLATFORM 审中-公开
公开(公告)号：US20180144144A1
公开(公告)日：2018-05-24
申请号：US15822824
申请日：2017-11-27
申请人： Accenture Global Services Limited
发明人： Song Luo , Walid Negm , James J. Solderitsch , Shaan Mulchandani , Amin Hassanzadeh , Shimon Modi
IPC分类号： G06F21/60 , H04L29/06 , H04L9/08
摘要： Systems, methods, and apparatus, including computer programs encoded on computer storage media, for facilitating communication in an industrial control network. A system includes an industrial control network, one or more controller devices, one or more emulators, and an encryption relay processor. Each controller device can be operable to control one or more operational devices connected to the industrial control network. Each emulator can be configured to communicate with a respective controller device, and each emulator can be configured to reference a respective profile that includes information about security capabilities of the respective controller device. The encryption relay processor can be operable to facilitate communication to and from each emulator over the industrial control network. The encryption relay processor can execute a cryptographic function for a communication between the emulator and a node on the industrial control network when the respective controller device is incapable of performing the cryptographic function.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式