System and method for anomalous database access monitoring
AssigneeRoyal Bank of Canada
InventorsNariman MAMMADLI, Hamidreza SATTARI
Life of this patent
Estimating the term…
Abstract
Systems and methods for database access monitoring are provided. The system comprises at least one processor and a memory storing instructions which when executed by the at least one processor configure the at least one processor to perform the method. The method comprises receiving login event data, generating a vector representation of a subject entity and a vector representation of an object entity associated with a login event in the login event data, determining a distance between the subject entity and the object entity, and determining an anomaly score for the subject entity and the object entity. The anomaly score based at least in part on the distance between the subject entity and object entity.
Claims20
A system comprising:
- at least one processor;
- and
- a memory comprising instructions which, when executed by the processor, configure the processor to:
- receive login event data;
- generate a vector representation of a subject entity and a vector representation of an object entity associated with a login event in the login event data;
- determine a distance between the subject entity and the object entity;
- and
- determine an anomaly score for the subject entity and the object entity, based at least in part on the distance between the subject entity and object entity.
A computer-implemented method comprising:
- receiving login event data;
- generating a vector representation of a subject entity and a vector representation of an object entity associated with a login event in the login event data;
- determining a distance between the subject entity and the object entity;
- and
- determining an anomaly score for the subject entity and the object entity, based at least in part on the distance between the subject entity and object entity.
Dependencies are inferred from the claim text.