Qomplx, Inc.

Fractal Industries, Inc.

Jason Crabtree

Andrew Sellers

Richard Kelley

Ian MacLeod

Luka Jurukovski

Angadbir Singh Salaria

Michael James

Farooq Shaikh

Randy Clayton

Bhashit Parikh

Raveem Ismail

Bharat Amin

Anant Borole

Farooq Israr Ahmed Shaikh

Joe Gray

David Park

Jason Hopper

Jeffrey Chung

Angad Salaria

Daniel Fricano

Marian Trnkus

Paolo Angioletti

Antony Pegg

Rajat Gupta

Stuart Baurmann

Nhan Tran

Mike Chasman

Sethan Arja

Artem Panasenkov

Shadrack Antwi

Penelope Brooks

Tomas Fornara

Alejandro Caceres

John Uchiyama

A system and method for the detection and mitigation of Kerberos golden ticket, silver ticket, and related identity-based cyberattacks by passively monitoring and analyzing Kerberos and authentication operations within the network. The system and method provide real-time detections of identity attacks using time-series data and data pipelines, and by transforming the stateless Kerberos protocol into stateful protocol. A packet capturing agent is deployed on the network where captured time-series Kerberos and related event and log information is processed in distributed computational graph (DCG) stages where declarative rules determine if an attack is being carried out and what type of attack it is.

Advanced detection of identity-based attacks to assure identity fidelity in information technology environments

A system and method for cybersecurity mission planning and analysis which uses artificial intelligence systems to make red and blue team exercises more comprehensive and effective by supplementing individual expertise, reducing reliance on intuition, and eliminating gaps in knowledge. In an embodiment, a platform for cyberattack missions planning and analysis by red and blue teams is coordinated by a control center. An incident generator generates cyberattack scenarios and events using data from external databases and an internal attack knowledge manager having a knowledge graph of data about the network under attack in conjunction with one or more machine learning algorithms configured to identify potential network vulnerabilities. Red are guided by a machine learning algorithm configured to provide suggestions as to potential successful attack paths. Blue teams are guided by a machine learning algorithm configured to provide suggestions as to potential successful attack paths.

Dynamic cyberattack mission planning and analysis

A system and method for crowdsensing-based determination of risk management and contract validation, comprising at least a heterogeneous mixture of sensors and data-gathering techniques, a sensor fusion suite, and a business operating system, which ingests, transforms if necessary, and analyzes received data and develops and applies models of prediction of consequences of the sensor data and future events based on such data for purposes such as insurance liability and risk assessment, emergency services planning, and financial market predictions, and comparing historical models and data with current data and models to attempt to refine and utilize a more precise predictive model for these purposes.

System and method for model-based prediction using a distributed computational graph workflow

A system and methods for mitigating authentication ticket attacks within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by near-real-time comparison of hashes for each authentication object to previously-generated hashes.

Detecting KERBEROS ticket attacks within a domain

A system for detecting and mitigating forged authentication object attacks in federated environments using attestation is provided, comprising an event inspector to monitor logs and detect vulnerable events, an authentication object inspector configured to observe a new authentication object generated by an identity provider, and intercept the new authentication object; and a hashing engine configured to calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in the SAML response; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Detecting and mitigating forged authentication object attacks in multi-cloud environments with attestation

A system for corporate plan determination and validation employing an advanced decision platform comprises a data retrieval module configured to retrieve cooperative venture related data such as financial, operations and historical data related to the current cooperative plan. A predictive analytics module performs predictive risk functions on venture related data. A predictive simulation module performs predictive simulation functions on risk, operations, and financial data. An interactive display module displays the results of predictive analytics and predictive simulation according to pre-designated specifications of the analysts.

Intelligent automated planning system for large-scale operations

A system for programmatic and user interactive inclusion of time-series geospatial markers in analyses employing a cyber-decision platform has been developed comprising a module to retrieve an indexed geospatial image tiles and map overlay data corresponding to tiles. The system may attach a unique geo-hash label to each point of an indexed geospatial image tile based upon the point's geographical coordinates such that points in close proximity will have similar geo-hash values. A web application interface allows users to interactively retrieve and visualize indexed geospatial image tiles, add map overlays and create geo-hashes as desired.

Inclusion of time-series geospatial markers in analyses employing a cyber-decision platform

A system for autonomous risk assessment and quantification for insurance policies for computer and information technology related risks, including but not limited to losses due to system availability, cloud computing failures, current and past data breaches, and data integrity issues. The system will use a variety of current risk information to assess the likelihood of operational interruption or loss due to both accidental issues and malicious activity. Based on these assessments, the system will be able to autonomously issue policies, adjust premium pricing, process claims, and seek re-insurance opportunities with a minimum of human input.

Platform for autonomous risk assessment and quantification for cyber insurance policies

A system and method that uses midservers located between an enterprise network and an external network to provide mass scanning network traffic detection and analysis capabilities for the enterprise network. The midserver may be loaded with configurations that allow it to operate as a mass scan event detector capable of detecting network sniffers, botnets, and malicious peer-to-peer connections which can lead to security vulnerabilities. In such configurations, midserver may receive and analyze network traffic to determine if the network traffic is suspicious based on heuristic and signature-based techniques, and then generate an appropriate response action which can be implemented to mitigate the risk.

System and method for midserver facilitation of mass scanning network traffic detection and analysis

A system and method for predictive cyber-physical resource management, including a business operating system, parameter evaluation engine, at least one cyber-physical asset, at least one crypt-ledger, a network, and the ability to represent data in Markov State Models and finite state machines.

System and methods for predictive cyber-physical resource management

A system is disclosed for discreetly assessing the compatibility of two or more human genomes across diverse elements, activities, and engagement platforms relevant to potential mating scenarios. The genomic data is subjected to encryption, with the option of employing homomorphic encryption to safeguard user privacy and security. Processing of the data is facilitated through a personal health database processing system, which may be cloud-based or edge-based. The application of homomorphic encryption ensures that the genomic information of individual users remains encrypted during processing, with the outcome limited to the display of progeny compatibility to the respective end users.

Discrete compatibility filtering using genomic data

A system for fully integrated collection of business impacting data, analysis of that data and generation of both analysis driven business decisions and analysis driven simulations of alternate candidate business actions has been devised and reduced to practice. This business operating system may be used to monitor and predictively warn of events that impact the security of business infrastructure and may also be employed to monitor client-facing services supported by both software and hardware to alert in case of reduction or failure and also predict deficiency, service reduction or failure based on current event data.

System for automated capture and analysis of business information for security and client-facing infrastructure reliability

A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Cybersecurity reconnaissance, analysis, and scoring using distributed systems

A system and method for collaborative cybersecurity defensive strategy analysis that predicts the evolution of new cybersecurity attack strategies and creates a virtual network space that provides a virtual reality environment for collaborative insights into network dynamics during a cyberattack. makes recommendations for cybersecurity improvements to networked systems based on a cost/benefit analysis. The system and method use machine learning algorithms to run simulated attack and defense strategies against a virtual network space model of the networked system created using a virtual network space manager. A simulation interaction server can facilitate secure sharing of virtual network spaces and simulations between and among various real and virtual actors to provide a collaborative space where one or more organization's network can be tested for resilience and mitigation. Recommendations are generated based on an analysis of the simulation results against a variety of cost/benefit indicators.

System and method for collaborative cybersecurity defensive strategy analysis utilizing virtual network spaces

A system for dynamic predictive analysis of data sets using an actor-driven distributed computational graph, wherein a pipeline orchestrator creates and manages individual data pipelines while providing data caching to enable interactions between specific activity actors within pipelines. Each pipeline then comprises a pipeline manager that creates and manages individual activity actors and directs operations within the pipeline while reporting back to the pipeline orchestrator.

Growing community of inventors

Vienna, VA, United States of America

Jason Crabtree