Arista Networks, Inc.

Awake Security, Inc.

David Pearson

Keith Eric Amidon

Gary Golomb

Debabrata Dash

Jeff Polakow

Matthew Park

An automated framework provides security monitoring and analysis in a network by autonomously detecting actual and potential threats to the network. In response to detection of a threat, the framework instantiates a Situation to provide directed monitoring of the threat. The Situation invokes specific skills based on the state of the Situation to monitor network traffic for activity specific to the threat that instantiated the Situation. As data is collected, additional skills may be invoked based on the additional data to collect new data, and previously invoked skills may be terminated depending on the additional data to avoid collecting information that is no-longer relevant.

Threat representation and automated tracking and analysis

System and method for evaluating communication between a plurality of computing devices is disclosed. A plurality of communication between a user computer and at least one a destination computer is monitored by a security appliance. Selective information from the plurality of communication is extracted by the security appliance. Extracted selective information between a pair of communication is compared for a match. An activity record is generated for the user computer and at least one destination computer, based on the match.

System and method for detecting a malicious activity in a computing environment

Growing community of inventors

Fairport, NY, United States of America

David Pearson