Forcepoint LLC

Other

Alan Ross

Raffael Marty

Nicolas Christian Fischbach

Chad Anson

Matthew P Moynahan

Margaret Cunningham

Ruchika Pandey

Al Messano

Clifford Charles Wright

Charles Richard Morse

Tobias Johnathon Ryan

A system, method, and computer-readable medium are disclosed for detecting malicious entity behavior and providing accurate indicator of behaviors indicating occurrence of malicious behavior. Data input as to the entity behavior is received and monitored from different sources. The entity behavior is monitored over time at time periods. Detection probability is determined at each time period, where the detection probability relates to malicious behavior and increases over time. A trigger indicator of behavior is provided if the detection probability reaches a threshold value.

Progressive trigger data and detection model

A system, method, and computer-readable medium are disclosed for performing an entity behavior cataloging operation. The entity behavior cataloging operation includes: identifying a security related activity, the security related activity being based upon an observable from an electronic data source; analyzing the security related activity, the analyzing identifying an event of analytic utility associated with the security related activity; generating entity behavior catalog data based upon the event of analytic utility associated with the security related activity; and, storing the entity behavior catalog data within an entity behavior catalog, the entity behavior catalog providing an inventory of entity behaviors for use when performing a security operation.

Generating an entity behavior profile based upon sessions

Entity behavior catalog architecture

A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes: monitoring an entity, the monitoring observing at least one electronically-observable data source; deriving an observable based upon the monitoring of the electronically-observable data source; identifying a security related activity of the entity, the security related activity being based upon the observable derived from the electronic data source, the security related activity being of analytic utility; converting the security related activity to entity behavior catalog data, the entity behavior catalog providing an inventory of entity behaviors; and, accessing an entity behavior catalog based upon the entity behavior catalog data; and performing a security operation via a security system, the security operation using the entity behavior catalog data stored within the entity behavior catalog based upon the security related activity.

Using an entity behavior catalog when performing security operations

Entity behavior catalog access management

A system, method, and computer-readable medium are disclosed for performing an entity behavior cataloging operation. The entity behavior cataloging operation includes: identifying a plurality of security related activities, the plurality of security related activities being based upon observables from an electronic data source; analyzing the plurality of security related activities, the analyzing identifying a set of entity behaviors associated with the plurality of security related activities; and, performing a security operation via a security system, the security operation accessing entity behavior catalog data stored within an entity behavior catalog based upon the set of entity behaviors associated with the plurality of security related activities, the entity behavior catalog providing an inventory of entity behaviors for use when performing the security operation.

Representing sets of behaviors within an entity behavior catalog

A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes: monitoring an entity, the monitoring observing at least one electronically-observable data source; deriving an observable based upon the monitoring of the electronically-observable data source; identifying a security related activity of the entity, the security related activity being based upon the observable derived from the electronic data source, the security related activity being of analytic utility; converting the security related activity to entity behavior catalog data, the entity behavior catalog providing an inventory of entity behaviors; accessing an entity behavior catalog based upon the entity behavior catalog data; inferring a security vulnerability scenario from the observable derived based upon the monitoring; and performing a security operation via a security system, the security operation using the security vulnerability scenario and the entity behavior catalog data stored within the entity behavior catalog based upon the security related activity.

Inferring a scenario when performing a security operation using an entity behavior catalog

A system, method, and computer-readable medium are disclosed for performing a security operation. The security operation includes: monitoring an entity, the monitoring observing at least one electronically-observable data source; deriving an observable based upon the monitoring of the electronically-observable data source; identifying a security related activity of the entity, the security related activity being based upon the observable derived from the electronic data source, the security related activity being of analytic utility; associating the security related activity with a component of a cyber kill chain; and, performing a security operation on the security related activity via a security system, the security operation disrupting performance of the component of the cyber kill chain by affecting performance of the security related activity by the entity.

Disrupting a cyber kill chain when performing security operations

A system, method, and computer-readable medium are disclosed for performing an entity behavior cataloging operation. The entity behavior cataloging operation includes: identifying a plurality of security related activities, the plurality of security related activities being based upon an observable from an electronic data source; analyzing the plurality of security related activities, the analyzing identifying a plurality of events of analytic utility associated with the plurality of security related activities; generating a set of entity behavior catalog data based upon the event of analytic utility associated with the security related activity, the set of entity behavior catalog data comprising an associated group of behaviors; and, storing the set of entity behavior data and the associated group of behaviors within an entity behavior catalog, the entity behavior catalog providing an inventory of entity behaviors for use when performing a security operation.

Defining groups of behaviors for storage within an entity behavior catalog

The invention relates to a method of rendering telecommunication devices ineffective, by creating a substantially radio frequency radiation-free environment by providing an interference generating pattern (IGP) adjacent to the environment in a position between the environment and a source of radio frequency radiation signals so as to substantially reduce, or interfere with such signals thus preventing typical operation of the wireless telecommunications devices. The IGP is generally one that is non-conductive and is or includes a diffraction grating. The IGP is positioned adjacent the environment between the environment and a source of radio frequency radiation signals. Preferably, the IGP is provided as a support member configured in the shape of a diffraction grating, and includes a paint or coating of a non-conductive material having a high dielectric constant thereon.

Technology for creating a RF radiation-free environment

The invention relates to a method of rendering telecommunication devices ineffective by creating a substantially radio frequency radiation-free environment. An interference generating pattern is provided adjacent the environment in a position between the environment and a source of radio frequency radiation signals so as to substantially reduce, or interfere with such signals thus preventing typical operation of the telecommunications devices therein. Preferably, the interference generating pattern is provided by applying silicon carbide as a coating or as part of a building material onto a structure to reduce attenuation by at least 20 to 50 decibels. Other aspects of the invention include the building materials that have the interference generating pattern associated therewith and the substantially radio frequency radiation-free environments that are created according to the methods disclosed herein.

Radio frequency radiation-free environments

A method and apparatus (3, 60, 202, 300) for measuring the dynamic, or alternating current, and static, or direct current, characteristics of a cable pair (2, 10, 24, 133) from one end, the local end, by utilizing an element (1, 19, 20) possessing known non-linear electrical characteristics connected across the other end, the remote end, together with methods and apparatus (30, 111) for connecting the non-linear element (1) across the remote end of the cable pair (2, 10, 24, 133) and disconnecting the non-linear element 11) by means of electrical voltages impressed across the cable pair (2, 10, 24, 133) at the local end. In the method and system of the present invention, the near end test set (3, 60, 202, 300) is electrically transposed to the far end of the cable pair (2, 10, 24, 133) making it appear, to be at the far end during the test while, physically remaining at the near end. The non-linear element (1), in its non-linear region, when suitably excited by two or more alternating signals of different frequencies ( 4, 12, 13, 41, 42, 113, 114), produces additional frequencies which travel back from the far end to the near end of the cable pair (2, 10, 24, 133) and are modified by the characteristics of the cable pair (2, 10, 24, 133). By selecting specific excitation frequencies and measuring the characteristics of the additional frequencies returned (6, 22, 52, 200), the characteristics of the cable (2, 10, 24, 133) can be deduced.

Near-end communications line characteristic measuring system with a

A wind propelled surfboard which has a catamaran hull wherein each hull can be folded to a collapsed position. Also, the mast and boom are capable of being folded when into a collapsed position when not in use.

Collapsible wind surfing vessel

A throat formed between jaws of a rigid bifurcate gripper can be moved horizontally to receive an edge portion of sheet structure. The gripper is freely tiltable so that application of a lifting force to it will effect tilting of the gripper relative to the sheet structure to bind such structure between the jaws. Normally the gripper is positioned by a counterweight with its elongated throat horizontal. The lower jaw is of reflex angle shape and is positioned relative to the upper jaw so that downward tilting of the jaws will cause them to bind the sheet structure in the gripper throat.

Growing community of inventors

Austin, TX, United States of America

Alan Ross