System and method for deriving network address spaces affected by security threats to apply mitigations
AssigneeCitrix Systems, Inc.
InventorsSaifulla Shaik, Aikaterini Kalou, Stuart Kennedy
Life of this patent
Estimating the term…
Abstract
Described embodiments provide systems and methods for generating a network space to perform mitigation actions on a plurality of users. At least one server may determine a plurality of users of one or more levels of riskiness in a network environment, and network locations of the users. Using a plurality of clustering features, the at least one server may generate a network space comprising a cluster of network locations corresponding to a subset of the users of at least a defined level of riskiness. The at least one server may perform a mitigation action on the subset of users corresponding to the generated network space.
Claims20
A method comprising:
- determining, by at least one server, a plurality of users of one or more levels of riskiness in a network environment, and network locations of the users;
- generating, by the at least one server using a plurality of clustering features, a network space comprising a cluster of network locations corresponding to a subset of the users of at least a defined level of riskiness;
- and
- performing, by the at least one server, a mitigation action on the subset of users corresponding to the generated network space.
A system comprising:
- at least one processor configured to:
- determine a plurality of users of one or more levels of riskiness in a network environment, and network locations of the users;
- generate, using a plurality of clustering features, a network space comprising a cluster of network locations corresponding to a subset of the users of at least a defined level of riskiness;
- and
- perform a mitigation action on the subset of users corresponding to the generated network space.
A non-transitory computer readable medium storing program instructions for causing at least one processor to:
- determine a plurality of users of one or more levels of riskiness in a network environment, and network locations of the users;
- generate, using a plurality of clustering features, a network space comprising a cluster of network locations corresponding to a subset of the users of at least a defined level of riskiness;
- and
- perform a mitigation action on the subset of users corresponding to the generated network space.
Dependencies are inferred from the claim text.