Policy specification framework for insider intrusions
US7415719B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Sep 24, 2004 |
| Grant date | Aug 19, 2008 |
| Priority date | — |
| Expiry date | Mar 30, 2026 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH05K7/1495
- WIPO fieldAudio-visual technology
- WIPO sectorElectrical engineering
Abstract
The present invention provides a policy specification framework to enable an enterprise to specify a given insider attack using a holistic view of a given data access, as well as the means to specify and implement one or more intrusion mitigation methods in response to the detection of such an attack. The policy specification provides for the use of “anomaly” and “signature” attributes that capture sophisticated behavioral characteristics of illegitimate data access. When the attack occurs, a previously-defined administrator (or system-defined) mitigation response (e.g., verification, disconnect, deprovision, or the like) is then implemented.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.