专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20170034187A1 SYSTEM AND METHODS FOR ADAPTIVE MODEL GENERATION FOR DETECTING INTRUSION IN COMPUTER SYSTEMS 审中-公开
标题翻译：用于自适应模型生成的系统和方法，用于检测计算机系统中的入侵
公开(公告)号：US20170034187A1
公开(公告)日：2017-02-02
申请号：US15291218
申请日：2016-10-12
申请人： THE TRUSTEES OF COLUMBIA UNIVERSITY IN THE CITY OF NEW YORK
发明人： Andrew Honig , Andrew Howard , Eleazar Eskin , Salvatore J. Stolfo
IPC分类号： H04L29/06 , G06N99/00 , G06N7/00 , G06F17/30
CPC分类号： H04L63/14 , G06F16/13 , G06F16/212 , G06F16/2455 , G06F21/554 , G06F21/566 , G06N7/005 , G06N20/00 , H04L63/1416 , H04L63/1425 , H04L63/1433
摘要： A system and methods for detecting intrusions in the operation of a computer system comprises a sensor configured to gather information regarding the operation of the computer system, to format the information in a data record having a predetermined format, and to transmit the data in the predetermined data format. A data warehouse is configured to receive the data record from the sensor in the predetermined data format and to store the data in a SQL database. A detection model generator is configured to request data records from the data warehouse in the predetermined data format, to generate an intrusion detection model based on said data records, and to transmit the intrusion detection model to the data warehouse according to the predetermined data format. A detector is configured to receive a data record in the predetermined data format from the sensor and to classify the data record in real-time as one of normal operation and an attack based on said intrusion detection model. A data analysis engine is configured to request data records from the data warehouse according to the predetermined data format and to perform a data processing function on the data records.
摘要翻译：一种用于在计算机系统的操作中检测入侵的系统和方法，包括：传感器，被配置为收集关于计算机系统的操作的信息，将信息格式化成具有预定格式的数据记录，并且以预定的方式发送数据数据格式。数据仓库配置为以预定数据格式从传感器接收数据记录，并将数据存储在SQL数据库中。检测模型生成器被配置为以预定数据格式从数据仓库请求数据记录，以基于所述数据记录生成入侵检测模型，并根据预定数据格式将入侵检测模型发送到数据仓库。检测器被配置为从传感器接收预定数据格式的数据记录，并且将数据记录实时地分类为正常操作之一和基于所述入侵检测模型的攻击。数据分析引擎被配置为根据预定数据格式从数据仓库请求数据记录，并对数据记录执行数据处理功能。

2. 发明申请

US20180124081A1 SYSTEM AND METHODS FOR DETECTING MALICIOUS EMAIL TRANSMISSION 审中-公开
公开(公告)号：US20180124081A1
公开(公告)日：2018-05-03
申请号：US15646733
申请日：2017-07-11
申请人： THE TRUSTEES OF COLUMBIA UNIVERSITY IN THE CITY OF NEW YORK
发明人： Salvatore J. Stolfo , Eleazar Eskin , Manasi Bhattacharyya , Shlomo Herskop
IPC分类号： H04L29/06 , H04L12/58
CPC分类号： H04L63/1425 , H04L51/12 , H04L63/145
摘要： A system and methods of detecting an occurrence of a violation of an email security policy of a computer system. A model relating to the transmission of prior emails through the computer system is defined which is derived from statistics relating to the prior emails. For selected emails to be analyzed, statistics concerning the selected email are gathered. Such statistics may refer to the behavior or other features of the selected emails, attachments to emails, or email accounts. The determination of whether a violation of an email security policy has occurred is performed by applying the model of prior email transmission to the statistics relating to the selected email. The model may be statistical or probabilistic. A model of prior email transmission may include grouping email recipients into cliques. A determination of a violation of a security policy may occur if email recipients for a particular email are in more than one clique.

3. 发明申请

US20150058994A1 SYSTEM AND METHODS FOR ADAPTIVE MODEL GENERATION FOR DETECTING INTRUSION IN COMPUTER SYSTEMS 审中-公开
标题翻译：用于自适应模型生成的系统和方法，用于检测计算机系统中的入侵
公开(公告)号：US20150058994A1
公开(公告)日：2015-02-26
申请号：US14509208
申请日：2014-10-08
申请人： The Trustees of Columbia University in the City of New York
发明人： Andrew Honig , Andrew Howard , Eleazar Eskin , Salvatore J. Stolfo
IPC分类号： H04L29/06 , G06F17/30
CPC分类号： H04L63/14 , G06F17/30091 , G06F17/30294 , G06F17/30477 , G06F21/554 , G06F21/566 , G06N7/005 , G06N99/005 , H04L63/1416 , H04L63/1425 , H04L63/1433
摘要： A system and methods for detecting intrusions in the operation of a computer system comprises a sensor configured to gather information regarding the operation of the computer system, to format the information in a data record having a predetermined format, and to transmit the data in the predetermined data format. A data warehouse is configured to receive the data record from the sensor in the predetermined data format and to store the data in a SQL database. A detection model generator is configured to request data records from the data warehouse in the predetermined data format, to generate an intrusion detection model based on said data records, and to transmit the intrusion detection model to the data warehouse according to the predetermined data format. A detector is configured to receive a data record in the predetermined data format from the sensor and to classify the data record in real-time as one of normal operation and an attack based on said intrusion detection model. A data analysis engine is configured to request data records from the data warehouse according to the predetermined data format and to perform a data processing function on the data records.
摘要翻译：一种用于在计算机系统的操作中检测入侵的系统和方法，包括：传感器，被配置为收集关于计算机系统的操作的信息，将信息格式化成具有预定格式的数据记录，并且以预定的方式发送数据数据格式。数据仓库配置为以预定数据格式从传感器接收数据记录，并将数据存储在SQL数据库中。检测模型生成器被配置为以预定数据格式从数据仓库请求数据记录，以基于所述数据记录生成入侵检测模型，并根据预定数据格式将入侵检测模型发送到数据仓库。检测器被配置为从传感器接收预定数据格式的数据记录，并且将数据记录实时地分类为正常操作之一和基于所述入侵检测模型的攻击。数据分析引擎被配置为根据预定数据格式从数据仓库请求数据记录，并对数据记录执行数据处理功能。

4. 发明申请

US20190215328A1 SYSTEM AND METHODS FOR ADAPTIVE MODEL GENERATION FOR DETECTING INTRUSION IN COMPUTER SYSTEMS 审中-公开
公开(公告)号：US20190215328A1
公开(公告)日：2019-07-11
申请号：US16358167
申请日：2019-03-19
申请人： THE TRUSTEES OF COLUMBIA UNIVERSITY IN THE CITY OF NEW YORK
发明人： Andrew Honig , Andrew Howard , Eleazar Eskin , Salvatore J. Stolfo
IPC分类号： H04L29/06 , G06F21/55 , G06F16/2455 , G06N7/00 , G06N20/00 , G06F16/21 , G06F16/13
CPC分类号： H04L63/14 , G06F16/13 , G06F16/212 , G06F16/2455 , G06F21/554 , G06F21/566 , G06N7/005 , G06N20/00 , H04L63/1416 , H04L63/1425 , H04L63/1433
摘要： A system and methods for detecting intrusions in the operation of a computer system comprises a sensor configured to gather information regarding the operation of the computer system, to format the information in a data record t, and to transmit the data. A database is configured to receive the data record from the sensor and to store the data record. A detection model generator is configured to request training data from data record, generate an intrusion detection model based on said training data, and to transmit the intrusion detection model to the data warehouse according to the predetermined data format. A detector is configured to receive a data record from the sensor and to determine whether said data record corresponds to an attack based on said intrusion detection model.

5. 发明授权

US09497203B2 System and methods for adaptive model generation for detecting intrusion in computer systems 有权
公开(公告)号：US09497203B2
公开(公告)日：2016-11-15
申请号：US14509208
申请日：2014-10-08
申请人： The Trustees of Columbia University in the City of New York
发明人： Andrew Honig , Andrew Howard , Eleazar Eskin , Salvatore J. Stolfo
IPC分类号： G06F11/00 , H04L29/06 , G06F21/55 , G06F17/30 , G06F21/56
CPC分类号： H04L63/14 , G06F17/30091 , G06F17/30294 , G06F17/30477 , G06F21/554 , G06F21/566 , G06N7/005 , G06N99/005 , H04L63/1416 , H04L63/1425 , H04L63/1433
摘要： A system and methods for detecting intrusions in the operation of a computer system comprises a sensor configured to gather information regarding the operation of the computer system, to format the information in a data record having a predetermined format, and to transmit the data in the predetermined data format. A data warehouse is configured to receive the data record from the sensor in the predetermined data format and to store the data in a SQL database. A detection model generator is configured to request data records from the data warehouse in the predetermined data format, to generate an intrusion detection model based on said data records, and to transmit the intrusion detection model to the data warehouse according to the predetermined data format. A detector is configured to receive a data record in the predetermined data format from the sensor and to classify the data record in real-time as one of normal operation and an attack based on said intrusion detection model. A data analysis engine is configured to request data records from the data warehouse according to the predetermined data format and to perform a data processing function on the data records.

6. 发明授权

US09306966B2 Methods of unsupervised anomaly detection using a geometric framework 有权
公开(公告)号：US09306966B2
公开(公告)日：2016-04-05
申请号：US13987690
申请日：2013-08-20
申请人： The Trustees of Columbia University in the City of New York
发明人： Eleazar Eskin , Andrew Arnold , Michael Prerau , Leonid Portnoy , Salvatore J. Stolfo
IPC分类号： H04L29/06
CPC分类号： H04L63/1425 , G06F17/30914
摘要： A method for unsupervised anomaly detection, which are algorithms that are designed to process unlabeled data. Data elements are mapped to a feature space which is typically a vector space d. Anomalies are detected by determining which points lies in sparse regions of the feature space. Two feature maps are used for mapping data elements to a feature apace. A first map is a data-dependent normalization feature map which we apply to network connections. A second feature map is a spectrum kernel which we apply to system call traces.

7. 发明申请

US20190020672A1 SYSTEM AND METHODS FOR DETECTING MALICIOUS EMAIL TRANSMISSION 审中-公开
公开(公告)号：US20190020672A1
公开(公告)日：2019-01-17
申请号：US16026801
申请日：2018-07-03
申请人： THE TRUSTEES OF COLUMBIA UNIVERSITY IN THE CITY OF NEW YORK
发明人： Salvatore J. Stolfo , Eleazar Eskin , Manasi Bhattacharyya , Shlomo Herskop
IPC分类号： H04L29/06 , H04L12/58
摘要： A system and methods of detecting an occurrence of a violation of an email security policy of a computer system. A model relating to the transmission of prior emails through the computer system is defined which is derived from statistics relating to the prior emails. For selected emails to be analyzed, statistics concerning the selected email are gathered. Such statistics may refer to the behavior or other features of the selected emails, attachments to emails, or email accounts. The determination of whether a violation of an email security policy has occurred is performed by applying the model of prior email transmission to the statistics relating to the selected email. The model may be statistical or probabilistic. A model of prior email transmission may include grouping email recipients into cliques. A determination of a violation of a security policy may occur if email recipients for a particular email are in more than one clique.

8. 发明申请

US20160366165A1 SYSTEM AND METHODS FOR DETECTING MALICIOUS EMAIL TRANSMISSION 审中-公开
公开(公告)号：US20160366165A1
公开(公告)日：2016-12-15
申请号：US14495168
申请日：2014-09-24
申请人： The Trustees Of Columbia University In The City Of New York
发明人： Salvatore J. Stolfo , Eleazar Eskin , Manasi Bhattacharyya , Shlomo Herskop
IPC分类号： H04L29/06 , H04L12/58
CPC分类号： H04L63/1425 , H04L51/12 , H04L63/145
摘要： A system and methods of detecting an occurrence of a violation of an email security policy of a computer system. A model relating to the transmission of prior emails through the computer system is defined which is derived from statistics relating to the prior emails. For selected emails to be analyzed, statistics concerning the selected email are gathered. Such statistics may refer to the behavior or other features of the selected emails, attachments to emails, or email accounts. The determination of whether a violation of an email security policy has occurred is performed by applying the model of prior email transmission to the statistics relating to the selected email. The model may be statistical or probabilistic. A model of prior email transmission may include grouping email recipients into cliques. A determination of a violation of a security policy may occur if email recipients for a particular email are in more than one clique.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式