Symantec Corporation

Symantec Operating Corporation

Nortonlifelock Inc.

Joseph Lopilato

Bruce Rabe

Michael Andrew Hart

Yufei Han

Russell Thrasher

Paul A Scammell

Shuzhou Liu

Zafrir E Gan

Log text is encoded into a low dimensional feature vector. A temporal predictive model is constructed based on the low dimensional feature vector. The temporal predictive model is used to calculate probabilities of the occurrence of security incidents based on signature names from the log text encoded in the low dimensional feature vector. A preventative security action is automatically taken in response to the calculated probability of the occurrence of a specific security incident exceeding a given threshold.

Identifying evidence of attacks by analyzing log text

The disclosed computer-implemented method for performing security analyzes on network traffic in cloud-based environments may include (1) collecting network traffic exchanged between a source device and a destination device for a security analysis by (A) receiving, from the destination device, a response to a request sent by the source device, (B) identifying, in a header of the response, information that facilitates access to at least a portion of the request, and (C) obtaining, based at least in part on the information identified in the header of the response, the portion of the request sent by the source device, and then (2) performing the security analysis on the network traffic by analyzing the portion of the request sent by the source device and at least a portion of the response. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for performing security analyses on network traffic in cloud-based environments

System and method for providing a common data model for SAN discovery and/or SAN monitoring information collected from heterogeneous SAN components. In one embodiment, a SAN management server may execute on a host computer and may translate data in one or more vendor-specific languages obtained from a heterogeneous vendor population into canonical data in a uniform language. In one embodiment, the SAN management server may execute a set of rules to convert heterogeneous SAN data obtained from heterogeneous interfaces into canonical data conforming to the common data model. In one embodiment, the canonical data may be stored in a persistent store, which may be queried for information that may be provided to the requester in the canonical form of the common data model.

System and method for storage area network management

Growing community of inventors

Townsend, MA, United States of America

Joseph Lopilato