Back to results
US 10,834,097 B2Granted
Adaptive trust profile components
AssigneeForcepoint LLC
InventorRichard A. Ford
Life of this patent
Estimating the term…
Abstract
A system, method, and computer-readable medium are disclosed for generating an adaptive trust profile via an adaptive trust profile operation. In various embodiments the adaptive trust profile operation includes: monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a plurality of respective events enacted by the entity; converting the plurality of electronically-observable actions of the entity to electronic information representing the plurality of actions of the entity; and generating the adaptive trust profile based upon the plurality of actions of the entity, the adaptive trust profile comprising a plurality of adaptive trust profile components.
Claims20
A computer-implementable method for generating an adaptive trust profile, comprising:
- monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a plurality of respective events enacted by the entity, the entity comprising a user entity;
- converting the plurality of electronically-observable actions of the entity to electronic information representing the plurality of actions of the entity;
- generating the adaptive trust profile based upon the plurality of actions of the entity, the adaptive trust profile being generated by an adaptive trust profile system, the adaptive trust profile system executing on a hardware processor of an information handling system, the adaptive trust profile comprising a plurality of adaptive trust profile components;
- generating, via the adaptive trust profile system, contextual information about an event enacted by the entity, the contextual information comprising information relating to a particular entity behavior;
- deriving, via the adaptive trust profile system, a meaning from the contextual information associated with the event, the meaning including an inference of an intent of the entity associated with the event;
- updating, via the adaptive trust profile system, at least one of the plurality of adaptive trust profile components based upon the contextual information about the event and the intent of the entity associated with the event;
- detecting entity behavior of analytic utility using the adaptive trust profile;
- and,
- adaptively responding to the entity behavior of analytic utility to mitigate a security risk.
6 more elements
A system comprising:
- a processor;
- a data bus coupled to the processor;
- and
- a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
- monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a plurality of respective events enacted by the entity, the entity comprising a user entity;
- converting the plurality of electronically-observable actions of the entity to electronic information representing the plurality of actions of the entity;
- generating the adaptive trust profile based upon the plurality of actions of the entity, the adaptive trust profile comprising a plurality of adaptive trust profile components;
- generating, via the adaptive trust profile system, contextual information about an event enacted by the entity, the contextual information comprising information relating to a particular entity behavior;
- deriving, via the adaptive trust profile system, a meaning from the contextual information associated with the event, the meaning including an inference of an intent of the entity associated with the event;
- updating, via the adaptive trust profile system, at least one of the plurality of adaptive trust profile components based upon the contextual information about the event and the intent of the entity associated with the event;
- and,
- detecting entity behavior of analytic utility using the adaptive trust profile;
- and,
- adaptively responding to the entity behavior of analytic utility to mitigate a security risk.
11 more elements
A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
- monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a plurality of respective events enacted by the entity, the entity comprising a user entity;
- converting the plurality of electronically-observable actions of the entity to electronic information representing the plurality of actions of the entity;
- generating the adaptive trust profile based upon the plurality of actions of the entity, the adaptive trust profile comprising a plurality of adaptive trust profile components;
- generating, via the adaptive trust profile system, contextual information about an event enacted by the entity, the contextual information comprising information relating to a particular entity behavior;
- deriving, via the adaptive trust profile system, a meaning from the contextual information associated with the event, the meaning including an inference of an intent of the entity associated with the event;
- updating, via the adaptive trust profile system, at least one of the plurality of adaptive trust profile components based upon the contextual information about the event and the intent of the entity associated with the event;
- and,
- detecting entity behavior of analytic utility using the adaptive trust profile;
- and,
- adaptively responding to the entity behavior of analytic utility to mitigate a security risk.
7 more elements
Dependencies are inferred from the claim text.