Peer Device Protection
AssigneeOpen Text Corporation
InventorPaul Barnes
Life of this patent
Estimating the term…
Abstract
Peer device protection enables a first device comprising a digital security agent to remedy security issues on (or associated with) a set of devices visible to the first device. In aspects, a first device comprising a digital security agent may identify a set of devices visible to the first device. The first device may monitor the set of devices to collect data, such as types of communications and data points of interest. The digital security agent may apply threat detection to the collected data to identify anomalous network behavior. When anomalous network behavior is detected, the first device may cause an indicator of compromise (IOC) to be generated. Based on the IOC, the first device may facilitate remediation of the anomalous network behavior and/or apply security to one or more devices in the set of devices.
Claims21
A peer device network system comprising:
- peer devices without access to cybersecurity, the peer devices connected via a network;
- a security device that is a peer to the peer devices, the security device connected to the network, the security device comprising:
- a processor;
- a memory storing a security agent that is executable by the processor, the security agent comprising instructions executable for:
- detecting the peer devices on the network;
- monitoring the peer devices to generate first monitored data;
- applying threat detection to the first monitored data to identify anomalous network behavior;
- generating an indicator of compromise corresponding to the identified anomalous network behavior;
- and
- based on the indicator of compromise, remediating the identified anomalous network behavior.
A peer device network system comprising:
- peer devices without access to cybersecurity, the peer devices connected via a network;
- a security device comprising:
- a processor;
- a memory storing:
- a device detection engine that is executable to identify the peer devices connected to the network;
- a monitoring engine that is executable to monitor the peer devices to generate first monitored data;
- a threat detection engine that is executable to:
- apply threat detection to the first monitored data to identify anomalous network behavior;
- and
- generate an indicator of compromise corresponding to the identified anomalous network behavior;
- and
- a remediation engine executable remediate the identified anomalous network behavior.
Dependencies are inferred from the claim text.