International Business Machines Corporation

Kyndryl, Inc.

Ivan James Reedman

Tim Uwe Scheideler

Arjun Udupi Raghavendra

Matthias Seul

A method for processing security events by applying a rule-based alarm scheme may be provided. The method includes generating a rule index of rules and an indicator of compromise index for each of the rules. The method includes also processing the incoming security event by applying the rules, increasing a current rule counter relating to a triggered rule, and increasing a current indicator of compromise counter pertaining to the triggered rule. Furthermore, the method includes generating a pseudo security event from received data about known attacks and related indicators of compromise, processing the pseudo security events by sequentially applying the rules, increasing a current rule counter of pseudo security events, and increasing a current indicator of compromise counter for pseudo security events, and sorting the rules and sorting within each rule the indicator of compromise values in the indicator of compromise index.

System and method for SIEM rule sorting and conditional execution

A method and system for determining a power consumption pattern for at least one application being executed on a computer is provided. The method comprises measuring a DC current and measuring a DC supply voltage provided to a data processing device, thereby creating a stream of time-stamped voltage value samples and current value samples. The method comprises further determining a product of the streams at identical times and converting the product into a real and an imaginary data stream using I/Q digital signal processing, combining these into a complex data stream, applying a signal processing demodulation step to the complex data stream, thereby generating a demodulated data stream, and extracting from the demodulated data stream at least one stream-based parameter signature, the at least one stream-based parameter signature representing the power consumption pattern of the at least one corresponding application being executed on the data processing device.

Detection of compromise through automated power analysis

As part of a signal processing event, the maximum frequency of an input signal can be determined with a processor. The maximum frequency can be compared to a value generated with a decimator/interpolator. Based on the comparison, the sampling rate for sampling the input signal with the processor can be set as part of the digital signal processing event. The sampling rate can be adjusted as the frequency of the input signal varies during the signal processing event.

Dynamic signal processing

A radio frequency radiation shield device may comprise a receiver for detecting a near field radio frequency signal at target frequencies. The shield device may further comprise a signal processor that samples signal characteristics of a detected signal and determines a nullifying signal in response to detecting a signal characteristic of the detected signal meeting a trigger threshold. The nullifying signal may comprise a modulated version of the detected signal. The shield device may further comprise a signaler for generating the nullifying signal. The shield device may further comprise a transmitter for transmitting the nullifying signal at target signals.

Radio frequency radiation shield device

A radio frequency radiation shield device may comprise a receiver for detecting a near field radio frequency signal. The receiver may include one or more receiving antennas for target frequencies. The shield device may further comprise a signal processor that samples signal characteristics of a detected signal and determines a nullifying signal in response to detecting a signal characteristic of the detected signal on a receiving antenna meets a trigger threshold. The nullifying signal may comprise a modulated version of the detected signal. The shield device may further comprise a signaler for generating the nullifying signal. The shield device may further comprise a transmitter. The transmitter may include a transmitting antenna at target frequencies for transmitting the nullifying signal.

Growing community of inventors

Cheltenham, United Kingdom

Ivan James Reedman