Bank of America Corporation

Colin Murphy

Kenneth A Kaye

Nikhil Harish Sanil

Satyanarayana R Mandapati

Dipika Joshi

Maharaj Mukherjee

Elvis Nyamwange

Matthew K Bryant

Utkarsh Raj

Dustin Paul Stocks

Carl M Benda

Suman Roy Choudhury

Vijay Kumar Yarabolu

Vidya Srikanth

Embodiments of the present invention provide a system for analyzing operational parameters of electronic and software components associated with entity applications to detect anomalies. The system is configured for extracting one or more historical images associated with resiliency status of electronic and software components associated with an entity application, analyzing the one or more historical images to generate a pixel wise average of the one or more historical images, generating similarity scores between the one or more historical images, determining a distribution of the similarity scores, receiving a real-time image associated with a current resiliency status of the electronic and software components associated with the entity application, generating a real-time image similarity score for the real-time image, and comparing the real-time image similarity score with the distribution to detect presence of an anomaly.

System and method for analyzing operational parameters of electronic and software components associated with entity applications to detect anomalies

A computing platform may train, using historical telemetry state images, an image comparison model to identify matches between telemetry state images. The computing platform may generate a plurality of system alerts corresponding to a period of time. The computing platform may access telemetry data corresponding to the period of time. The computing platform may generate, based on the telemetry data and for a time corresponding to each of the plurality of system alerts, a telemetry state image. The computing platform may input, into the image comparison model, the telemetry state images to identify whether or not any of the plurality of telemetry state images match. Based on detecting a match, the computing platform may consolidate system alerts corresponding to the matching telemetry state images, which may produce a single system alert and may send, to a user device, the single system alert.

System and method for consolidation of alerts and events using image matching of heatmap descriptions of infrastructure status

Aspects of the disclosure relate to monitoring a computing network to determine data exfiltration. A computing platform may use time-series modeling to determine anomalous network activity with respect to outgoing data. Additional aspects of this disclosure relate to analysis of web activities associated with a user to determine compromised user accounts/devices. The computing platform may use domain categorization to determine if web activity associated with a user is anomalous.

Detecting data exfiltration and compromised user accounts in a computing network

Aspects of the disclosure relate to data feed meta detail categorization for confidence. A computing platform may retrieve source data from a source system and identify a first set of patterns associated with the source data. The computing platform may retrieve, from a target system, partially transferred data associated with an ongoing data transfer from the source to the target system and identify a second set of patterns associated with the partially transferred data. The computing platform may evaluate integrity of the partially transferred data by comparing the first set of patterns with the second set of patterns. The computing platform may detect whether the first set of patterns falls within an expected deviation from the second set of patterns based on the comparison and halt the ongoing data transfer based on detecting that the first set of patterns falls outside the expected deviation from the second set of patterns.

Data feed meta detail categorization for confidence

Aspects of the disclosure relate to data feed meta detail categorization for confidence. A computing platform may retrieve source data from a source system and identify a first set of patterns associated with the source data. The computing platform may retrieve, from a target system, transferred data associated with a data transfer from the source system to the target system and identify a second set of patterns associated with transferred data. The computing platform may evaluate integrity of the transferred data by comparing the first set of patterns with the second set of patterns. The computing platform may detect whether the first set of patterns falls within an expected deviation from the second set of patterns based on the comparison. The computing platform may send one or more notifications based on detecting that the first set of patterns falls outside the expected deviation from the second set of patterns.

Growing community of inventors

Charlotte, NC, United States of America

Colin Murphy