System, method, and computer program product for detecting and assessing security risks in a network
US10095871B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Sep 19, 2017 |
| Grant date | Oct 9, 2018 |
| Priority date | — |
| Expiry date | Sep 19, 2037 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1433
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.