Bank of America Corporation

Edward L Haletky

Amanda Jane Adams

Adam B Richman

Kathleen D Schaumburg

Elizabeth Swanzy-Parker

Tommy W Jinks

Khalil Jackson

Jesse Williams

Saumitra Gupta

A network connection device may include at least one sandbox to detect, isolate, and remove any discovered malware or cyber threat. The device may be configured to receive, save, and inspect data. A control layer may manage network connectivity so that only home organization network connections or external party network connections are connected at given moment in time.

Relay-switch with sandbox communication connections

Aspects of the disclosure relate to enhanced chain of custody certification. A computing platform may establish, within a period of time of receiving data, a first distributed ledger that includes the data. The computing platform may receive a request to access the data. The computing platform may compute a first hash of the data indicating a state of the data prior to being accessed, and may record the first hash in a second distributed ledger. After granting data access, the computing platform may receive first information indicating actions performed on the data and second information indicating reasons for accessing the data. The computing platform may compute a second hash of the data indicating a state of the data after being accessed, and may record the second hash and the second information in the second distributed ledger. The computing platform may record, in a third distributed ledger, the first information.

Distributed ledgers for enhanced chain of custody certification

Aspects of the disclosure relate to application mapping and alerting based on data dependencies in business and technology logic. In some embodiments, a computing platform may receive a request to map enterprise technology resources. Then, the computing platform may generate a business capability model. Next, the computing platform may cause a user computing device to display a graphical user interface comprising selectable graphical representations of applications associated with the enterprise technology resources. Then, the computing platform may receive a user input identifying an occurrence of a technology incident by selecting one of the graphical representations. In response to the selection, the computing platform may trace, using the generated business capability model, upstream or downstream impacts of the technology incident. Then, the computing platform may cause a visual representation of data dependencies indicating upstream or downstream impacts of the technology incident to be displayed on the user computing device.

Application mapping and alerting based on data dependencies

Methods, systems, and computing platforms for data collection are disclosed. The system may include one or more hardware and virtual processors configured by machine-readable instructions. The processor(s) may be configured to electronically launch at least one virtual machine operatively connected to a virtualization layer. The processor(s) may be configured to electronically create a virtual disk for the at least one virtual machine connected to the virtualization layer so as to receive a plurality of artifact data.

Method and system for data collection using hypervisor

The present disclosure is directed to a novel system for active and passive management of location-based copy data. The system may intake user data from various data sources into a rules engine, which contains the decision logic to format the incoming data according to location-dependent rules. The system may continuously index the incoming data as well as metadata (e.g., data source, data storage location, rules associated with the data, or the like). Based on the output of the rules engine and/or index engine, an action engine may execute various processing steps to condition the data for storage in a particular system. Furthermore, the system may use passive and continuous rule updates with the process as described herein to automatically update the stored user data to conform to the new rules.

System for active and passive management of location-based copy data

Aspects of the disclosure relate to processing systems that generate a virtual air gap to facilitate improved techniques for establishing console access to a cyber range virtual environment. The computing platform may receive a request to generate a virtual air gap to facilitate brokering of a connection between a secure console host platform and a cyber range host platform. The computing platform may generate the virtual air gap, which may include a built-in kill switch. The computing platform may implement the virtual air gap, which may be configured to receive requests to establish a connection between the secure console host platform and the cyber range host platform and to grant the secure console host platform access to a broker. The broker may establish the connection, and the computing platform may terminate the connection in response to activation of the built-in kill switch.

Processing system for providing console access to a cyber range virtual environment

Aspects of the disclosure relate to processing systems that implement a virtual air gap to facilitate improved techniques for establishing console access to a cyber range virtual environment. A computing platform may receive, via a first firewall, a cyber range request and authentication credentials from a secure console host platform. By comparing the authentication credentials to access records in a stored database, the computing platform may determine an authorization level corresponding to the authentication credentials. After verifying the authentication credentials, the computing platform may grant access to a broker, which may grant access to a console hosted by the secure console host platform. The computing platform may establish, using the broker and between the console and a cyber range host platform, a connection, which may cause a user device to access, through the console, cyber ranges hosted by the cyber range host platform that correspond to the determined authorization level.

Growing community of inventors

Austin, TX, United States of America

Edward L Haletky