Symantec Corporation

Alexander Fontana

Eric Bothwell

Christopher C Jones

Jeremy Hermann

Michel Zoppas

Daren Desjardins

Conal O'Raghallaigh

A method and apparatus for automatically correlating policy violation incidents. In one embodiment, the method includes receiving user input identifying one of policy violation incidents stored in a data repository, where each policy violation incident is associated with one or more attributes. The method further includes automatically correlating the identified policy violation incident with other policy violation incidents that have in common at least one attribute with the identified policy violation incident, and presenting the resulting correlation information to a user.

Method and apparatus for automatically correlating related incidents of policy violations

A method and apparatus for scanning structured data from a data repository having an arbitrary data schema and for applying a policy to the data of the data repository are described. In one embodiment, the structured data is converted to unstructured text data to allow a schema-independent policy to be applied to the text data in order to detect a policy violation in the data repository regardless of the data schema used by the data repository.

Method and apparatus for detecting policy violations in a data repository having an arbitrary data schema

Growing community of inventors

San Francisco, CA, United States of America

Alexander Fontana