Back to results
US 10,872,148 B2Granted
System, method, and computer program product for isolating a device associated with at least potential data leakage activity, based on user input
AssigneeMcAfee, Inc.
InventorsSrinivasan Sankararaman, Deepakeswaran Kolingivadi
Life of this patent
Estimating the term…
Abstract
A system, method, and computer program product are provided for isolating a device associated with at least potential data leakage activity, based on user input. In operation, at least potential data leakage activity associated with a device is identified. Furthermore, at least one action is performed to isolate the device, based on user input received utilizing a user interface.
Claims21
A computer-implemented method for reducing an impact of data leakage activity in a network, comprising:
- generating, by executing an instruction with at least one processor of a first computer, a user prompt including choices for isolating a first node in the network, the user prompt generated in response to detecting a notification that indicates (a) a second computer detected a potential data leakage activity of the first node and (b) a suggested action for isolating the node, at least one of the choices including the suggested action, the first node different than the first computer and the second computer;
- determining, by executing an instruction with the at least one processor of the first computer, the first node is in a group of nodes;
- and
- in response to detecting the notification, forming an isolated group, by executing an instruction with the at least one processor of the first computer, by causing at least one device to enforce a policy to isolate the first node and ones of the group of nodes that have exhibited characteristics of the potential data leakage activity from the network, the policy including monitoring traffic flowing out of the isolated group to determine whether additional potential data leakage activity is present.
1 more element
A storage device or storage medium comprising instructions that when executed cause a first computer to at least:
- in response to a notification that indicates (1) a second computer detected a potential data leakage activity on a first node in a network and (2) a suggested action for isolating the first node, generate a user prompt including choices for isolating the first node, at least one of the choices including the suggested action, the first node different than the first computer and the second computer;
- determine the first node is in a group of nodes;
- and
- in response to detecting the notification, form an isolated group by causing at least one device to enforce a policy to isolate the first node and ones of the group of nodes that have exhibited characteristics of the potential data leakage activity from the network, the policy including monitoring traffic flowing out of the isolated group to determine whether additional potential data leakage activity is present.
1 more element
A system, comprising:
- one or more processors of a first computer;
- and
- a memory, coupled to the one or more processors, including instructions that, when executed by the one or more processors, cause the one or more processors to at least:
- in response to a notification that indicates (1) a second computer detected a potential data leakage activity on a first node in a network and (2) a suggested action for isolating the first node, generate a user prompt including choices for isolating the first node, at least one of the choices including the suggested action, the first node different than the first computer and the second computer;
- determine the first node is in a group of nodes;
- and
- in response to detecting the notification, form an isolated group by causing at least one device to enforce a policy to isolate the first node and ones of the group of nodes that have exhibited characteristics of the potential data leakage activity from the network, the policy including monitoring traffic flowing out of the isolated group to determine whether additional potential data leakage activity is present.
4 more elements
Dependencies are inferred from the claim text.