Back to results
US 10,320,849 B2Granted
Security enhancement tool
AssigneeBank of America Corporation
InventorSasidhar Purushothaman
Life of this patent
Estimating the term…
Abstract
A method comprises receiving a notification of a new system violation and determining whether the new system violation in combination with one or more of a plurality of existing system violations presents a threat to the system. The method further comprises increasing the security of the system in response to determining that the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system, wherein increasing the security of the system comprises one or more of increasing an authorization level and increasing an authentication level.
Claims18
A security enhancement tool comprising:
- a memory configured to store:
- a plurality of entries, wherein each entry comprises at least:
- a classification of at least two or more system violations;
- and
- an indication of whether the at least two or more system violations is a threat to a system;
- wherein:
- each system violation comprises a deviation from a baseline, the baseline being assigned to a specific user of the system;
- and
- each system violation is classified as one of:
- an access violation;
- a configurational violation;
- an unauthorized modification;
- a usage violation;
- and
- an unsecured surface violation;
- a plurality of existing system violations, wherein each existing system violation indicates a previous attempt to compromise the system and comprises at least a classification of the existing system violation;
- an identification engine configured to:
- receive a notification of a new system violation, the new system violation being different than each existing violation, the new system violation is performed by a user of the system;
- and
- identify a component of the system threatened by the new violation;
- an evaluation engine configured to determine whether the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system;
- and
- an enhancement engine configured to increase the security of the system in response to determining that the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system, wherein increasing the security of the system comprises one or more of increasing an authorization level and increasing an authentication level, increasing the authorization level comprises assigning a baseline to the user, the baseline corresponds to activities on the system that the user is approved to participate in, activity of the user that deviates from the baseline triggers the new system violation.
20 more elements
A method comprising:
- receiving, by an interface associated with a system, a notification of a new system violation, the new system violation being different than each of a plurality of existing system violations, wherein the new system violation and the plurality of existing system violations each indicate an attempt to compromise the system, the new system violation is performed by a user of the system;
- determining, by at least one processor associated with the system, a component of the system threatened by the new violation;
- determining, by the at least one processor, whether the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system by:
- determining a plurality of combinations based on the new system violation and one or more of the plurality of existing system violations;
- and
- identifying, within a memory associated with the system, an entry comprising one of the plurality of combinations, wherein each entry comprises a classification of at least two or more system violations and an indication of whether the at least two or more system violations is a threat to the system, wherein:
- each system violation indicates a deviation from a baseline, the baseline being assigned to a specific user of the system;
- and
- each system violation is classified as one of:
- an access violation;
- a configurational violation;
- an unauthorized modification;
- a usage violation;
- and
- an unsecured surface violation;
- and
- increasing the security of the system in response to determining that the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system, wherein increasing the security of the system comprises one or more of increasing an authorization level and increasing an authentication level, increasing the authorization level comprises assigning a baseline to the user, the baseline corresponds to activities on the system that the user is approved to participate in, activity of the user that deviates from the baseline triggers the new system violation.
14 more elements
One or more computer-readable non-transitory storage media embodying software that is operable when executed to:
- receive a notification of a new system violation, the new system violation being different than each of a plurality of existing system violations, wherein the new system violation and the plurality of existing system violations each indicate an attempt to compromise a system, the new system violation is performed by a user of the system;
- determine a component of the system threatened by the new violation;
- determine whether the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system by:
- determining a plurality of combinations based on the new system violation and one or more of the plurality of existing system violations;
- and
- identifying, within a memory associated with the system, an entry comprising one of the plurality of combinations, wherein each entry comprises a classification of at least two or more system violations and an indication of whether the at least two or more system violations is a threat to the system, wherein:
- each system violation indicates a deviation from a baseline, the baseline being assigned to a specific user of the system;
- and
- each system violation is classified as one of:
- an access violation;
- a configurational violation;
- an unauthorized modification;
- a usage violation;
- and
- an unsecured surface violation;
- and
- increase the security of the system in response to determining that the new system violation in combination with one or more of the plurality of existing system violations presents a threat to the system, wherein increasing the security of the system comprises one or more of increasing an authorization level and increasing an authentication level, increasing the authorization level comprises assigning a baseline to the user, the baseline corresponds to activities on the system that the user is approved to participate in, activity of the user that deviates from the baseline triggers the new system violation.
14 more elements
Dependencies are inferred from the claim text.