Back to results
US 2014/0282871 A1Published application
Universal actor correlator
AssigneeClick Security, Inc.
InventorsVictoria L. Rowland, Brian Smith
Life of this patent
Estimating the term…
Abstract
Precorrelation of data applied to use cases by a module intermediate to the data and use cases provides normalized data across multiple sources for more effective analysis. For example, network sensors provide network telemetry to a precorrelation core, which extracts and normalizes the data to correlate actors to events. Universal actor correlation improves visualizations by creating a mesh of events tied to each other through a common actor.
Claims3
A network security system comprising:
- plural use cases operable to identify predetermined conditions in data from plural sources, the predetermined conditions including indications of unauthorized network accesses;
- a data source having network telemetry from plural sensors, at least some of the network telemetry including at one or more events and one or more actors, the network telemetry associated with authorized and unauthorized network accesses;
- a precorrelation core interfaced with the data source and operable to associate events and actors, each event defined as a type selected from the group of flow, authenticate, access, security and policy event types.
A method for monitoring network security, the method comprising:
- retrieving network telemetry from plural sensors;
- storing the network telemetry at a data source;
- precorrelating the network sensor information by associating plural events of the data source with a common actor;
- and
- presenting a visualization of the plural events that depicts a relationship with the common actor.
2 more elements
Dependencies are inferred from the claim text.