Data Surveillance System with Patterns of Centroid Drift
AssigneeFlying Cloud Technologies, Inc.
InventorBrian P. Christian
Life of this patent
Estimating the term…
Loading patent…
AssigneeFlying Cloud Technologies, Inc.
InventorBrian P. Christian
Estimating the term…
Data surveillance techniques are presented for the detection of security issues, especially of the kind where privileged data may be stolen by steganographic, data manipulation or any form of exfiltration attempts. Such attempts may be made by rogue users or admins from the inside of a network, or from outside hackers who are able to intrude into the network and impersonate themselves as legitimate users. The system and methods use a triangulation process whereby analytical results pertaining to data protocol, user-behavior and packet content are combined to establish a baseline for the data. Subsequent incoming data is then scored and compared against the baseline to detect any security anomalies. A centroid representing the normal population of the data packets is identified. The movement or drift of the centroid in response to various events is measured and analyzed. This allows the system to evolve its baseline over time thereby preventing issuing false positives for such events.
A computer-implemented method of surveillance of a plurality of packets of data in a computer network of an organization, said method executing computer program instructions stored in a non-transitory storage medium and comprising the steps of:
A system for surveilling a plurality of packets of data in a computer network of an organization, said system including computer-readable instructions stored in a non-transitory storage medium and a microprocessor coupled to said storage medium for executing said computer-readable instructions, said microprocessor configured to:
Dependencies are inferred from the claim text.