Back to results
US 2019/0104136 A1Published application
Apparatus, system and method for identifying and mitigating malicious network threats
AssigneeLevel 3 Communications, LLC
InventorsBrad Bernay Doctor, Skyler Jameson Bingham, Keshava Berg, John Sherwood Reynolds, Justin George Mohr
Life of this patent
Estimating the term…
Abstract
Implementations of the present disclosure involve a system and/or method for identifying and mitigating malicious network threats. Network data associated is retrieved from various sources across a network and analyzed to identify a malicious network threat. When a threat is found, the system performs a mitigating action to neutralize the malicious network threat
Claims6
A system for identifying malicious threats on a network comprising:
- a computing device including a processor coupled to a system memory, the system memory storing instructions for execution on the processor, the instructions configured to cause the processor to:
- retrieve a network data associated with at least one of an IP address or a domain;
- analyze the network data and identify a malicious network threat by performing the steps of:
- normalizing the network data to a standard format;
- supplementing the network data with at least one tag that identifies the network activity data;
- storing the network data in a database;
- weighting the network data according to a threat associated with the data;
- and
- generating a risk score for the weighted data;
- and
- based on the risk score for the weighted data, perform a mitigating action to neutralize the malicious network threat, wherein the mitigating action comprises at least one of a null routing the malicious network threat, adjusting an access control list (ACL) to block the malicious network threat, publishing a list identifying a bad actor committing the malicious network threat, or logically separating the IP address or domain from a network.
8 more elements
A method for identifying malicious threats on a network comprising:
- retrieving a network data associated with at least one of an IP address or a domain;
- analyzing the network data and identify a malicious network threat by performing the steps of:
- normalizing the network data to a standard format;
- decorating the network data with at least one tag that identifies the network activity data;
- storing the network data in a database;
- weighing the network data according to a threat associated with the data;
- and
- generating a risk score for the weighted data;
- and
- based on the risk score for the weighted data, performing a mitigating action to neutralize the malicious network threat, wherein the mitigating action comprises at least one of a null routing the malicious network threat, adjusting an access control list (ACL) to block the malicious network threat, publishing a list identifying a bad actor committing the malicious network threat, or logically separating the IP address or domain from a network.
7 more elements
Dependencies are inferred from the claim text.