Qinetiq North America, Inc.

Graphus, Inc.

Network Solutions Inc.

Manoj Kumar Srivastava

Eric Alexander Olson

William Andrews Walker

David Holtzman

Scott Hollenbeck

Steven Robert Smith

Neeran Saraf

Techniques for detecting and/or handling target attacks in an enterprise's email channel are provided. The techniques include receiving aspects of an incoming email message addressed to a first email account holder, selecting a recipient interaction profile and/or a sender profile from a plurality of predetermined profiles stored in a memory based upon the received properties, determining a message trust rating associated with the incoming email message based upon the incoming email message and the selected recipient interaction profile and/or the sender profile; and generating an alert identifying the incoming email message as including a security risk based upon the determined message trust rating. The recipient interaction profile includes information associating the first email account holder and a plurality of email senders from whom email messages have previously been received for the first email account holder, and the sender profile includes information associating a sender of the incoming email message with characteristics determined from a plurality of email messages previously received from the sender.

Systems and methods for detecting and/or handling targeted attacks in the email channel

Methods and systems for detecting social engineering attacks comprise: extracting one or more non-semantic data items from an incoming email; determining whether the one or more non-semantic data items match information stored in a data store of previously collected information; performing behavioral analysis on the one or more non-semantic data items; analyzing semantic data associated with the email to determine whether the non-semantic data matches one or more patterns associated with malicious emails; and based on the determining, performing, and analyzing, identifying the email as potentially malicious or non-malicious. The system also includes processes for collecting relevant information for storage within the data store and processes for harvesting information from detected social engineering attacks for entry into the data store and seeding of the collection processes.

Social engineering protection appliance

Methods and systems for collecting and processing large volumes of data to determine the relevancy and value thereof comprise: deploying one or more data retrieval modules to interface with one or more data sources within the local network, wherein the one or more data retrieval modules comprise executable program code; executing the one or more data retrieval modules to perform operations comprising: accessing application data representing data stored or communicated through the one or more data sources; and forwarding the application data for analysis; and analyzing the forwarded application data to determine whether it is relevant to the topic, wherein the analyzing is performed by one or more devices within the local network.

Knowledge discovery appliance

An apparatus and method for processing a domain name registration operation in a shared registration system is provided. A registry receives a request for performing a domain name registration operation from a registrar. The registry performs an authentication of the registrar that sent the request. If the registrar is determined to be authenticated, the registry then determines whether the registrar is authorized to perform an action necessitated by the operation. Subsequently, the registry executes the operation based on a determination that the registrar is authorized and stores changes necessitated by the operation in a database. A response indicating success or failure of the operation is sent to the registrar.

Growing community of inventors

Reston, VA, United States of America

Manoj Kumar Srivastava