Qomplx, Inc.

Fractal Industries, Inc.

Jason Crabtree

Andrew Sellers

Richard Kelley

Ian MacLeod

Luka Jurukovski

Angadbir Singh Salaria

Randy Clayton

Michael James

Farooq Shaikh

Bhashit Parikh

Raveem Ismail

Farooq Israr Ahmed Shaikh

Joe Gray

Bharat Amin

Anant Borole

David Park

Jason Hopper

Marian Trnkus

Angad Salaria

Jeffrey Chung

Daniel Fricano

Paolo Angioletti

Stuart Baurmann

Tomas Fornara

Alejandro Caceres

John Uchiyama

Artem Panasenkov

Mike Chasman

Antony Pegg

Penelope Brooks

Shadrack Antwi

Sethan Arja

Nhan Tran

Rajat Gupta

A system for risk-based multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computation graph module configured to receive network traffic data from the multi-dimensional time series data server, determine a network traffic baseline from the network traffic data, and determine a verification score needed before granting access based at least in part by the network traffic baseline. A plurality of verification methods build up a user's verification score to required level to gain access.

Risk-based multi-factor authentication

A dynamic experience curation platform utilizing AI and ML techniques, including neural networks and generative models, to enhance user interactions with content on the Internet. The platform employs an Experience Broker (EB) service to disintermediate user devices from the internet (or other content/information sources), improving security and user experience. It processes content requests, extracts relevant information, filters out unwanted content like ads, transforms, combines, and/or mutates existing content, and generates curated content consistent with user preferences and other constraints. The platform's generative AI process renders content into a user interface consistent with user preferences. It allows for personalized content delivery across devices, including virtual and augmented reality environments. The platform supports a spectrum of personalization, allowing users to fine-tune their content consumption experience. Additionally, it manages user sessions across devices and integrates various databases for storing user profiles, preferences, and other relevant information.

Dynamic experience curation platform

A system and method for automated software vulnerability detection and patching using sandboxed analysis. The system receives executable machine code files and identifies target device types for execution. A sandbox environment emulates device functionality and executes code while monitoring for suspicious behavior including memory scanning, unauthorized system access, and irregular network activity. Machine learning algorithms analyze execution patterns to detect security vulnerabilities and exploits. Upon identifying threats, the system automatically generates protective patches such as address space layout randomization and data execution prevention measures. These patches are deployed to real devices to prevent exploitation. The system uses reinforcement learning to improve patch effectiveness over time. This automated approach enables proactive cybersecurity protection by responding to emerging threats before malicious exploitation occurs.

System and methods for sandboxed software analysis with automated vulnerability detection and patch development, deployment and validation

A system and method for a flexible, high-speed Managed Detection and Response platform that ingests, parses, normalizes, monitors, and correlates nearly any log source or security tool output. The MDR comprising of a declarative connector service that tags events with appropriate data source labels to facilitating data isolation, proper handling, and provenance across multiple customers and security products but otherwise aggregate alerts into a single data stream for consumption by the MDR SOC operators. A connector service further provides a programmatic (API-based) means to interchange data securely across environments. Event data is aggregated by the Managed Detection and Response platform that then utilizes enhanced log ingest capabilities to process the data allowing SOC operators to be able to write rules against the alerts.

System and method for aggregating and securing managed detection and response connection interfaces between multiple networked sources

A system and method for the detection and mitigation of Kerberos golden ticket, silver ticket, and related identity-based cyberattacks by passively monitoring and analyzing Kerberos and authentication operations within the network. The system and method provide real-time detections of identity attacks using time-series data and data pipelines, and by transforming the stateless Kerberos protocol into stateful protocol. A packet capturing agent is deployed on the network where captured time-series Kerberos and related event and log information is processed in distributed computational graph (DCG) stages where declarative rules determine if an attack is being carried out and what type of attack it is.

Advanced detection of identity-based attacks to assure identity fidelity in information technology environments

A system and method for cybersecurity mission planning and analysis which uses artificial intelligence systems to make red and blue team exercises more comprehensive and effective by supplementing individual expertise, reducing reliance on intuition, and eliminating gaps in knowledge. In an embodiment, a platform for cyberattack missions planning and analysis by red and blue teams is coordinated by a control center. An incident generator generates cyberattack scenarios and events using data from external databases and an internal attack knowledge manager having a knowledge graph of data about the network under attack in conjunction with one or more machine learning algorithms configured to identify potential network vulnerabilities. Red are guided by a machine learning algorithm configured to provide suggestions as to potential successful attack paths. Blue teams are guided by a machine learning algorithm configured to provide suggestions as to potential successful attack paths.

Dynamic cyberattack mission planning and analysis

A system and method for crowdsensing-based determination of risk management and contract validation, comprising at least a heterogeneous mixture of sensors and data-gathering techniques, a sensor fusion suite, and a business operating system, which ingests, transforms if necessary, and analyzes received data and develops and applies models of prediction of consequences of the sensor data and future events based on such data for purposes such as insurance liability and risk assessment, emergency services planning, and financial market predictions, and comparing historical models and data with current data and models to attempt to refine and utilize a more precise predictive model for these purposes.

System and method for model-based prediction using a distributed computational graph workflow

A system and methods for mitigating authentication ticket attacks within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by near-real-time comparison of hashes for each authentication object to previously-generated hashes.

Detecting KERBEROS ticket attacks within a domain

A system for detecting and mitigating forged authentication object attacks in federated environments using attestation is provided, comprising an event inspector to monitor logs and detect vulnerable events, an authentication object inspector configured to observe a new authentication object generated by an identity provider, and intercept the new authentication object; and a hashing engine configured to calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in the SAML response; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Detecting and mitigating forged authentication object attacks in multi-cloud environments with attestation

A system for corporate plan determination and validation employing an advanced decision platform comprises a data retrieval module configured to retrieve cooperative venture related data such as financial, operations and historical data related to the current cooperative plan. A predictive analytics module performs predictive risk functions on venture related data. A predictive simulation module performs predictive simulation functions on risk, operations, and financial data. An interactive display module displays the results of predictive analytics and predictive simulation according to pre-designated specifications of the analysts.

Intelligent automated planning system for large-scale operations

A system for programmatic and user interactive inclusion of time-series geospatial markers in analyses employing a cyber-decision platform has been developed comprising a module to retrieve an indexed geospatial image tiles and map overlay data corresponding to tiles. The system may attach a unique geo-hash label to each point of an indexed geospatial image tile based upon the point's geographical coordinates such that points in close proximity will have similar geo-hash values. A web application interface allows users to interactively retrieve and visualize indexed geospatial image tiles, add map overlays and create geo-hashes as desired.

Inclusion of time-series geospatial markers in analyses employing a cyber-decision platform

A system for autonomous risk assessment and quantification for insurance policies for computer and information technology related risks, including but not limited to losses due to system availability, cloud computing failures, current and past data breaches, and data integrity issues. The system will use a variety of current risk information to assess the likelihood of operational interruption or loss due to both accidental issues and malicious activity. Based on these assessments, the system will be able to autonomously issue policies, adjust premium pricing, process claims, and seek re-insurance opportunities with a minimum of human input.

Platform for autonomous risk assessment and quantification for cyber insurance policies

A system and method that uses midservers located between an enterprise network and an external network to provide mass scanning network traffic detection and analysis capabilities for the enterprise network. The midserver may be loaded with configurations that allow it to operate as a mass scan event detector capable of detecting network sniffers, botnets, and malicious peer-to-peer connections which can lead to security vulnerabilities. In such configurations, midserver may receive and analyze network traffic to determine if the network traffic is suspicious based on heuristic and signature-based techniques, and then generate an appropriate response action which can be implemented to mitigate the risk.

System and method for midserver facilitation of mass scanning network traffic detection and analysis

A system and method for predictive cyber-physical resource management, including a business operating system, parameter evaluation engine, at least one cyber-physical asset, at least one crypt-ledger, a network, and the ability to represent data in Markov State Models and finite state machines.

System and methods for predictive cyber-physical resource management

A system is disclosed for discreetly assessing the compatibility of two or more human genomes across diverse elements, activities, and engagement platforms relevant to potential mating scenarios. The genomic data is subjected to encryption, with the option of employing homomorphic encryption to safeguard user privacy and security. Processing of the data is facilitated through a personal health database processing system, which may be cloud-based or edge-based. The application of homomorphic encryption ensures that the genomic information of individual users remains encrypted during processing, with the outcome limited to the display of progeny compatibility to the respective end users.

Growing community of inventors

Vienna, VA, United States of America

Jason Crabtree