专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2019136282A1 CONTROL MATURITY ASSESSMENT IN SECURITY OPERATIONS ENVIRONMENTS 审中-公开
公开(公告)号：WO2019136282A1
公开(公告)日：2019-07-11
申请号：PCT/US2019/012392
申请日：2019-01-04
申请人： OPAQ NETWORKS, INC.
发明人： SWEENEY, Matthew Stephen , GABBARD, Derek , CORCORAN, Casey , CAMP, John , WACKER, Chris , WANICK, Brit
IPC分类号： G06F21/57 , G06Q10/06
CPC分类号： H04L63/20 , G06F21/577 , G06F2221/034 , G06Q10/0635 , H04L41/0686 , H04L41/069 , H04L41/0816 , H04L41/0883 , H04L41/142 , H04L41/145 , H04L43/045 , H04L43/06 , H04L63/1425 , H04L63/1433 , H04L63/1441
摘要： Method and system embodiments for assessing control maturity in security operations environments are described. According to some embodiments, the method facilitates a nonintrusive, automated means to configure and detect security controls installed in an Information Technology (IT) environment. The system verifies that these controls function as expected over a specified period of time and then maps each security control to a cell in a matrix of operational functions crossed with asset classes. The system captures metrics for security control activity that are displayed in the matrix to facilitate an assessment of security control architectural maturity. The system automatically generates visual and textual reports that provide recommendations to improve cybersecurity by enhancing existing and adding new controls, specify a suggested timeline for introducing those controls, and document gaps in compliance. The reports include automated remediation recommendations per compliance framework, including the ability to apply custom frameworks.

2. 发明申请

WO2019135951A1 METHODS AND SYSTEMS FOR PROVIDING AN INTEGRATED ASSESSMENT OF RISK MANAGEMENT AND MATURITY FOR A CYBERSECURITY/PRIVACY PROGRAM 审中-公开
公开(公告)号：WO2019135951A1
公开(公告)日：2019-07-11
申请号：PCT/US2018/067175
申请日：2018-12-21
申请人： CRITERION SYSTEMS, INC.
发明人： HECKMAN, Robert Carl , CHANDLER, Daniel Keith
IPC分类号： G06F21/57 , G06F21/62 , H04L29/06
CPC分类号： H04L63/1425 , G06Q10/0635 , H04L63/20
摘要： Embodiments include a computing device with a memory and a processor configured to perform operations including computing a cybersecurity and privacy (CS&P) framework profile (or risk factor) for a cybersecurity program implemented by an enterprise, computing a CS&P maturity level (or maturity factor) for the cybersecurity program, determining an integrated result for the cybersecurity program based at least in part on a combination of the CS&P framework profile and the maturity factor.

3. 发明申请

WO2019127834A1 交易事件的处理方法、装置、终端设备及介质审中-公开
公开(公告)号：WO2019127834A1
公开(公告)日：2019-07-04
申请号：PCT/CN2018/074875
申请日：2018-01-31
申请人：平安科技(深圳)有限公司
发明人：郑细书 , 刘潜
IPC分类号： G06Q10/06
CPC分类号： G06Q10/0635 , G06Q20/382 , H04L63/1416 , H04L63/1425
摘要：本方案提供了一种交易事件的处理方法、装置、终端设备及介质，适用于互联网技术领域，该方法包括：获取预设的多个风控规则集；获取交易请求账号与风控条件关联的第一属性值以及第二属性值；分别对每个风控规则集中的风控条件对应的第一属性值以及第二属性值进行运算处理，以输出每一风控规则集的风险评估等级；若存在任一风控规则集的风险评估等级为危险级，则将该风控规则集所对应的风险行为类型确定为交易事件所存在的风险行为类型；根据确定出的风险行为类型的预设反馈方式，执行对交易请求账号的反馈操作。本方案提高了异常交易行为的识别准确率，在非支付场景下，也能预先对交易请求账号的风险状态进行初步的评估，实现了主动式的风控处理。

4. 发明申请

WO2019112994A1 USING MACHINE LEARNING IN AN INDUSTRIAL CONTROL NETWORK TO IMPROVE CYBERSECURITY OPERATIONS 审中-公开
公开(公告)号：WO2019112994A1
公开(公告)日：2019-06-13
申请号：PCT/US2018/063737
申请日：2018-12-04
申请人： HONEYWELL INTERNATIONAL INC.
发明人： MCMURDIE, Kevin , GADHE, Ganesh P.
IPC分类号： H04L29/06 , G06F21/57 , G05B19/418
CPC分类号： G06F21/56 , G05B13/0265 , G05B13/04 , G05B15/02 , G06F21/552 , G06F21/577 , G06Q10/0635
摘要： This disclosure provides a security system (154) and method for using machine learning to improve cybersecurity operations in an industrial control networks (100) and other systems. A method includes collecting (302), by a security system (154), current process information (182) for a plurality of processes in a control system (100). The method includes analyzing (308), by the security system (154), the current process information (182) according to one or more process models (106). The method includes producing (310), by the security system (154) and according to the analysis, a risk report (188) that identifies an abnormal process among the plurality of processes.

5. 发明申请

WO2018205371A1 风险评估方法、装置、服务器和存储介质审中-公开
公开(公告)号：WO2018205371A1
公开(公告)日：2018-11-15
申请号：PCT/CN2017/090575
申请日：2017-06-28
申请人：平安科技(深圳)有限公司
发明人：王健宗 , 黄章成 , 吴天博 , 肖京
IPC分类号： G06Q10/06
CPC分类号： G06Q10/0635
摘要：一种风险评估方法，包括：接收终端发送的风险评估请求；查找社交网络图；监控风险因子，根据风险因子在社交网络图中确定被激活的第一级激活节点；根据社交网络图计算第一级激活节点对其邻接关联节点的累计权重，并判断累计权重是否超过邻接关联节点的预设激活阈值以确定第二级激活节点；根据第一级激活节点和第二级激活节点确定下一级激活节点，直至激活的关联节点的累计权重传递到评估主体，得到评估主体的累计权重，进而得到评估主体风险评估结果，将风险评估结果发送至终端。

6. 发明申请

WO2018073711A1 METHOD FOR CALCULATING THE CIBERSECURITY RISK OF AN ORGANIZATION 审中-公开
标题翻译：计算组织安全风险的方法
公开(公告)号：WO2018073711A1
公开(公告)日：2018-04-26
申请号：PCT/IB2017/056366
申请日：2017-10-13
申请人： LONDON CYBER SECURITY LTD
发明人： LEVI, Ram , HOROWITZ, Matthew
IPC分类号： G06Q10/06
CPC分类号： G06Q10/0635
摘要： The field of application of the present invention relates to the processes of managing the vulnerability of an IT system in an organization. The concept of computer security of any organization is currently expressed internationally with the use of the English term "Cybersecurity", the use of which is to indicate both a theoretical discipline and a more and more important function that must be ensured in every organization that uses "Computer Systems" for its own business. The present invention teaches to generate a quantitative evaluation (i.e. a set of scores) associated with the computer risk, and it takes due account of the impact that any possible computer attack can generate on the operation of the organization, providing an integrated and truly significant view of the actual risk associated with each threat and its possible economic impact. It also allows to generate real-time synthetic (and easy readable) information frameworks, in which the negative economic impacts are quantified according to the threats of which the risk is assessed. The outlined method is able to take benefit from ail the relevant information available in the organization itself, and not just the information directly associated with the IT platforms it uses, as is the case in the known practice. Therefore, it integrates a model of both the organization under analysis and its operational processes; it also processes context data obtained through BIA {Business Impact Analysis} analysis and through industrial intelligence processes.
摘要翻译：本发明的应用领域涉及管理组织中的IT系统的脆弱性的过程。任何组织的计算机安全概念目前都在国际上用英语术语“网络安全”表达，其用途是指示理论学科和越来越重要的功能，这些功能必须在每个组织使用“计算机系统” 为自己的事业。本发明教导产生与计算机风险相关的定量评估（即一组分数），并且适当考虑到任何可能的计算机攻击可能对组织的运行产生的影响，从而提供综合且真正重要的查看与每个威胁相关的实际风险及其可能的经济影响。它还可以生成实时合成（易读）信息框架，其中根据评估风险的威胁对负面经济影响进行量化。概述的方法能够从组织本身的所有相关信息中受益，而不仅仅是与其使用的IT平台直接相关的信息，正如已知实践中的情况一样。因此，它整合了分析中的组织和运作流程的模型; 它还处理通过BIA {业务影响分析}分析和工业智能流程获得的上下文数据。

7. 发明申请

WO2018069906A1 PROCEDURE AND SYSTEM FOR THE OPTIMIZATION OF THE EXCAVATION PROCESS OF AN UNDERGROUND WORK, FOR THE MINIMIZATION OF THE RISKS INDUCED ON INTERFERED WORKS 审中-公开
标题翻译：优化地下工程开挖过程的程序和系统，以最大限度地减少干扰工程的风险
公开(公告)号：WO2018069906A1
公开(公告)日：2018-04-19
申请号：PCT/IB2017/056415
申请日：2017-10-16
申请人： SWS ENGINEERING S.P.A.
发明人： DANZI, Andrea , ECCHER, Gabriele
IPC分类号： G06Q10/06
CPC分类号： G06Q50/08 , G06Q10/0631 , G06Q10/0635
摘要： The system (S) for the optimization of the excavation process of an underground work, for the minimization of the risks induced on interfered works comprises a determination and storage unit (Ul) for the determination of a plurality of basic parameters needed for the assessment of the phenomena and induced risk scenario in interfered works, starting from a plurality of documents (Dl, D2) in electronic format, and for the structured storage of the basic parameters inside a database (DB); a definition unit (U2) of a plurality of induced risk scenarios which could occur in interfered works, starting from the basic parameters stored on the database (DB); an application unit (U3), for each of the scenarios generated by the definition unit (U2), of predefined geo- mechanical, hydro-geological and structural models, for the quantitative measurement of the factor of risk and/or damage (R) in interfered works; an aggregation unit (U4) of each measurement of the factor of risk and/or damage (R) in interfered works, obtained from the application unit (U3) for each of the scenarios, to obtain a synthesis of the induced risk on the interfered works.
摘要翻译：用于优化地下工程的挖掘过程的系统（S），用于最小化干扰工程上引起的风险，包括确定和存储单元（U1），用于确定多个从电子格式的多个文件（D1，D2）开始，并且将基本参数结构化存储在数据库（DB）内，评估被干扰作品中的现象和诱发风险情景所需的基本参数; 从存储在数据库（DB）上的基本参数开始，可能在干扰作品中出现的多个诱发风险情景的定义单元（U2）; 对于定义单元（U2）生成的用于定量测量风险和/或损害因子（R）的预定义地质力学，水文地质和结构模型的每个场景的应用单元（U3）在受干扰的作品中; 从应用单元（U3）针对每个场景获得的受干扰作品中的风险和/或损害因子（R）的每个测量的聚合单元（U4），以获得受干扰的诱导风险的合成的工作原理。

8. 发明申请

WO2018063773A1 USING CLASSIFIED TEXT AND DEEP LEARNING ALGORITHMS TO IDENTIFY RISK AND PROVIDE EARLY WARNING 审中-公开
标题翻译：使用分类文本和深度学习算法识别风险并提供早期警告
公开(公告)号：WO2018063773A1
公开(公告)日：2018-04-05
申请号：PCT/US2017/050555
申请日：2017-09-07
申请人： INTRASPEXION INC.
发明人： BRESTOFF, Nelson
IPC分类号： G06N3/08 , G06Q10/06
CPC分类号： G06Q50/18 , G06F17/28 , G06K9/6256 , G06K9/6267 , G06N3/0445 , G06N3/0481 , G06N3/08 , G06N20/00 , G06Q10/0635
摘要： Deep learning is used to identify specific, potential risks to an enterprise (of which litigation is the prime example) while such risks are still internal electronic communications. The system involves mining and using existing classifications of data (e.g., from a litigation database) to train one or more deep learning algorithms, and then examining the internal electronic communications with the trained algorithm, to generate a scored output that will enable enterprise personnel to be alerted to risks and take action in time to prevent the risks from resulting in harm to the enterprise or others.
摘要翻译：
深度学习用于识别企业的具体潜在风险（以诉讼为例），而此类风险仍为内部电子通信。该系统涉及挖掘和利用现有的数据分类（例如来自诉讼数据库）来训练一种或多种深度学习算法，然后使用训练的算法检查内部电子通信，以生成评分输出，以使企业人员能够注意风险并及时采取行动，以防止风险造成对企业或其他人的损害。

9. 发明申请

WO2018052327A1 METHOD FOR RISK-MANAGEMENT OVER LIFECYCLE OF COMPLEX PRODUCTS AND PROCESSES 审中-公开
标题翻译：复杂产品和过程的生命周期风险管理方法
公开(公告)号：WO2018052327A1
公开(公告)日：2018-03-22
申请号：PCT/PT2017/000006
申请日：2017-05-05
申请人： 4TUNE - CONSULTADORIA E SERVIÇOS DE ENGENHARIA INDUSTRIAL, LDA.
发明人： ROBALO, Tiago , MACHADO, João E. , FELIZARDO, Pedro M. , MENEZES, José C.
IPC分类号： G06Q10/06
CPC分类号： G06Q10/0635 , G06N5/022
摘要： A method for building risk-management workflows ('Step A'), comprising severa1 risk analysis tools seamless integrated ('Step B1), to be applied to process design, process and equipment qualification, manufacturing stages and supply management ('Step C') of multi-step processing of chemical, pharmaceutical or biologic products ('Step D for risk identification, assessment, mitigation and management over lifecycle ('Step E thus supporting ongoing process verifications, product quality reviews, and knowledge-based process and product continuous improvement ( ' Step F' ). Workflows ('Step A') can be specific of certain stages ('Step C, products ('Step D production equipment or facilities used to produce products, but can and should be combined to support the lifecycle management aspects of steps 'E' and F. The use of workf lows ( 'Step A' 1 with 'Step B' features combined, supports the type of activities in steps 'E1 and F provides a knowledge-management framework ('Step F') applicable across multiple products and platform technologies, that supports a science-based justification to decisions taken at defined lifecycle stages ( 'Step C' ).
摘要翻译：一种建立风险管理工作流程的方法（'步骤A'），包括无缝集成的多个风险分析工具（'步骤B1），用于过程设计，过程和设备鉴定，制造阶段和供应管理（'步骤C'）化学，药物或生物产品的多步骤处理（'步骤D用于生命周期中的风险识别，评估，缓解和管理（'步骤E，从而支持正在进行的过程验证，产品质量评审，（'步骤F'）工作流程（'步骤A'）可以是特定的某些阶段（'步骤C，产品（'步骤D生产设备或用于生产产品的设施，但可以并应结合使用以支持步骤“E”和F的生命周期管理方面。工作流程的使用（“步骤A”1与“步骤B”功能相结合，支持步骤E1和F中的活动类型，知识管理框架（'步骤F'）适用于多种产品和平台技术，支持在定义生命周期阶段进行决策的科学理由（'步骤C'）。

10. 发明申请

WO2018029511A1 PSYCHOPHYSIOLOGICALLY ENHANCED FINANCIAL MARKET TRADING SYSTEMS AND SECURITIES EXCHANGES 审中-公开
标题翻译：心理学生态增强的金融市场交易系统和证券交易所
公开(公告)号：WO2018029511A1
公开(公告)日：2018-02-15
申请号：PCT/IB2016/054847
申请日：2016-08-11
申请人： MEDANIC, Krunoslav Ken
发明人： MEDANIC, Krunoslav Ken
IPC分类号： G06Q10/06
CPC分类号： G06Q10/0635
摘要： Trading within the context of the financial markets is characterized by decisions that are made between buyer and seller that either conclude with a reward or loss. Thusly, trading can be considered a performance-based activity wherein one's success is directly impacted by one's performance. Like any other performance-based activity, trading can be negatively impacted by psychophysiological stress. The problem with conventional trading systems, securities exchanges and the methods and processes they employ is that they do not address the psychophysiological states of the participant and thusly ignore the impact stress can have on the trading process. This exemplary system facilitates improved decision making and mitigates loss during trading activities with the integration of non-invasive, psychophysiological, performance-enhancement tools and techniques embedded within a comprehensive trading and securities exchange system. The exemplary systems, methods, interfaces and software demonstrated herewith enhances the financial market decision making process for both the buyer and seller by quantifying their psychophysiological response to the opportunities and threats of the financial markets in real-time. This process of quantifying psychophysiological response serves to inform advanced decision making assessment, training, monitoring and evaluation toward the objective of attaining a state of consistent peak performance, thereby providing for improved real rates of return for traders, investors, portfolio managers and fund managers alike.
摘要翻译：在金融市场背景下进行交易的特点是在买方和卖方之间做出的决定，其结果是奖励或亏损。因此，交易可以被认为是一种基于表现的活动，其中一个人的成功直接受到某人表现的影响。与其他任何基于表现的活动一样，交易可能会受到心理生理压力的负面影响。常规交易系统，证券交易所及其采用的方法和流程的问题是，它们没有解决参与者的心理生理状态，因此忽略了压力对交易过程的影响。该示例性系统通过集成嵌入在综合交易和证券交易系统内的非侵入性心理生理学性能增强工具和技术来促进改进的决策制定并减轻交易活动期间的损失。本文所展示的示例性系统，方法，界面和软件通过量化其对金融市场的机会和威胁的实时心理生理响应，增强了买方和卖方的金融市场决策过程。量化心理生理反应的这一过程用于向高级决策制定评估，培训，监测和评估提供信息，以实现一致的高峰表现，从而为交易者，投资者，投资组合经理和基金经理提供更高的实际回报率

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式