Back to results
US 11,909,759 B1Granted
Identifying assets for review
AssigneeRapid7, Inc.
InventorsRichard Tsang, Fatemeh Kazemeyni, Evgeniya Barkova
Life of this patent
Estimating the term…
Abstract
Methods and systems for identifying assets for review. The methods described herein involve generating an organizational statistical model describing assets associated with a first organization and generating a report identifying a discrepancy between the organizational statistical model and an identified asset of the first type associated with the first organization.
Claims20
A method comprising:
- executing, by one or more processors, instructions stored on memory, the execution comprising:
- generating an organizational statistical model describing assets associated with a first organization, wherein the organizational statistical model includes at least one cluster associated with a plurality of assets of a first type and designates a benchmark asset of the at least one cluster that is closest to a centroid of the at least one cluster;
- identifying an asset of the first type based on a discrepancy between the identified asset and the benchmark asset;
- generating, via a user interface, a report identifying the identified asset for review;
- and
- responsive to user feedback received via the user interface, initiating a threat mitigation procedure on the identified asset, wherein the mitigation procedure includes one or more of placing the identified asset on a blacklist, monitoring the identified asset for malicious, and quarantining the identified asset.
3 more elements
A system comprising:
- a computer system comprising one or more hardware processor configured to execute instructions stored on a non-transitory computer-readable medium to:
- receive, via an interface, organizational asset data related to a first organization;
- generate an organizational statistical model describing assets associated with a first organization, wherein the organizational statistical model includes at least one cluster associated with a plurality of assets of a first type and designates a benchmark asset of the at least one cluster that is closest to a centroid of the at least one cluster;
- identify an asset of the first type based on a discrepancy between the identified asset and the benchmark asset;
- generate, via a user interface, a report identifying the identified asset for review;
- and
- responsive to user feedback received via the user interface, initiate a threat mitigation procedure on the identified asset, wherein the mitigation procedure includes one or more of placing the identified asset on a blacklist, monitoring the identified asset for malicious, and quarantining the identified asset.
4 more elements
Dependencies are inferred from the claim text.