System and method for identifying unauthorized activities on a computer system using a data structure model
US9106697B2 · kind B2 · utility
27Cited by
23References
23Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jun 17, 2011 |
| Grant date | Aug 11, 2015 |
| Priority date | — |
| Expiry date | Oct 20, 2032 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1491
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A computer implemented method includes monitoring activity on the virtual machine. A plurality of activities being performed at the virtual machine is identified. Each of the activities includes an activity source, an activity target, and an association between the activity source and the activity target. The activity sources, activity targets, and associations are stored in the memory. A fingerprint indicative of the activity on the virtual machine is created from the stored activities. The fingerprint is transmitted to prevent future attacks that comprise the same or similar activities as indicated by the fingerprint.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.