Correlation based security risk identification
US9560067B2 · kind B2 · utility
0Cited by
6References
25Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jun 9, 2016 |
| Grant date | Jan 31, 2017 |
| Priority date | — |
| Expiry date | Jun 9, 2036 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/20
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Methods and systems are disclosed for identifying security risks, arising from credentials existing on machines in the networks that enable access to other machines on the networks. Account credentials indications are retrieved from machines in the network, which indicate that credentials for accounts are stored on those machines. Access rights for accounts are collected, describing the access and operation permissions of these accounts on machines in the networks. A correlation is then performed to identify machines that can be accessed by employing credentials of accounts retrieved from other machines in the network.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.