Bitsight Technologies, Inc.

Daniel Dahlberg

Stephen Wayne Boyer

Philip John Steuart Gladstone

Nagarjuna Venna

Austin Allshouse

David Feinzeig

Amy Eastment

Mathew Cherian

Methods and supporting systems for discovering and attributing computational assets to respective entities includes receiving datasets comprising source record data for numerous of entities and including attributes such as point of contact data elements and normalizing the data elements to maintain a consistent format across the source record data. A filter is applied against the normalized source record data to identify data that are either (i) redundant or (ii) refer to a bulk control entity. A further curation step can be applied against the data as the data is stored as a bipartite graph, wherein a first set of nodes of the bipartite graph represents source records and a second set of nodes represents attributes of the source records.

Systems and methods for precomputation of digital asset inventories

Disclosed are computer-implemented methods for ranking importance of assets of an entity, in which the assets can include hosts and/or IP addresses associated with the entity. The exemplary methods can include receiving datasets from one or more sources indicating frequency of system access, system configuration, and/or application configuration. The methods can include determining one or more input data based on the datasets. The methods can include determining, for each host and/or IP address associated with the entity, an importance ranking based on the input data. In some examples, the importance ranking may be based on a weighting of two or more input data.

Systems and methods for determining asset importance in security risk management

Methods and systems are provide for assessing the cybersecurity state of entities based on extended-computer network characteristics. A method can include obtaining, for a plurality of computer networks associated with an entity and not associated with the entity, a first and second network dataset. The first and second network datasets can be combined. A plurality of Internet Protocol (IP) addresses associated with the entity and associated with a plurality of entities can be obtained, where the entity and the plurality of entities each associated with a unique identifier (UID). The method can include determining whether each of the plurality of computer networks not associated with the entity comprises a remote office network. A cybersecurity state of the entity can be determined based on an evaluation of security characteristics of the IP addresses associated with the entity and of one or more IP addresses attributed to the remote office networks.

Systems and methods for assessing cybersecurity risk in a work from home environment

A number of techniques facilitate generation of data points from observations about network traffic. An inferencing system can use these data points to determine whether a relationship exists between two entities or whether an existing relationship has terminated, without any external knowledge of the existence of or termination of such a relationship.

Systems and methods for inferring entity relationships via network communications of users or user devices

A computer-implemented method is provided for mapping IP addresses and domain names to organizations. The method includes receiving, by a mapping system from an data provider, a dataset related to a plurality of users of the data provider. The dataset includes (a) an IP address for a user device of each user of the plurality of users, and (b) a domain name for a user account of each user of the plurality of users; enriching, by an analytics engine of the mapping system, the received dataset with enrichment data from an enrichment source; receiving, by the analytics engine from a storage medium, historical data relevant to the enriched dataset; and mapping, by the analytics engine, (i) the IP address and/or (ii) the domain name of each user of a portion of the plurality of users to an organization based on the enriched dataset and the historical data.

Methods for mapping IP addresses and domains to organizations using user activity data

A system for discovering digital assets and determining an association between the assets and an entity analyzes publicly available information about entities of interest and dataset(s) generated via network observations from devices using the digital assets. Additional attributes included in the network observations dataset(s) and metadata from such observations may be used to enhance the correctness of the identified entity-asset associations. Network observations dataset(s) may be monitored on an on-going basis to provide current entity-asset associations.

Systems and methods for network asset discovery and association thereof with entities

Among other things, information is obtained by computer about Internet-related assets of organizations. The information is used to identify relationships between the organizations with respect to the assets. The information about the identified relationships is made available for display or analysis or both.

Relationships among technology assets and services and the entities responsible for them

Computer-implemented methods are provided for assessing the cybersecurity state of entities based on computer network characterization. The exemplary method can include obtaining, for one or more computer networks of a plurality of computer networks associated with an entity, a network dataset including a service set identifier (SSID); and obtaining a plurality of Internet Protocol (IP) addresses associated with the entity. The method can further include determining whether each of the plurality of computer networks includes a public network or a private network based on the network dataset; and assessing a cybersecurity state of the entity based on an evaluation of security characteristics of the IP addresses attributed to the private network, excluding security characteristics of the IP addresses attributed to the public network.

Growing community of inventors

Somerville, MA, United States of America

Daniel Dahlberg