Oracle International Corporation

Emc Corporation

Novell, Inc.

Michael Howard Cooper

Usman Choudhary

John Melvin Antony

Dipto Chakravarty

John Paul Gassner

Prathap Adusumilli

Frank Anthony Pellegrino

Pattabiraman Srinivasan

William Matthew Weiner

Srinivasa Phanindra Mallapragada

Ofer Zajicek

Srivani Sangita

Raghunath Boyalakuntla

Vasile Adiaconitei

Shahid Saied Malik

Walter Mathews

Karthik Ramu

Jason Lee Arrington

Adedoyin Akinnurun

Cheryl Witt

Brett Hankins

Tao Yu

Magdalene Ramona Merritt

Peng Liu

Described herein is a system and method for auditing governance, risk, and compliance using an event correlation architecture. In particular, the event correlation architecture may include a solution designer for defining a solution pack that enforces one or more specific governance, risk, or compliance controls, and a solution manager for deploying the solution pack within the event correlation architecture to configure the architecture for enforcement of the one or more controls. Thus, a collection of content defined in the solution pack may be used to enrich one or more events received at the event correlation architecture, and a correlation engine may then correlate the events using the content in the solution pack to enforce the one or more governance, risk, or compliance controls.

System and method for auditing governance, risk, and compliance using a pluggable correlation architecture

A system for pluggable event correlation may include an input manager that receives a plurality of events and converts the events into a format compatible with one or more of a plurality of correlation engines. The correlation engines may then evaluate the converted events using various rules and generate correlated events when the evaluated events trigger at least one of the rules. An action manager may execute remedial actions when the correlation engines generate the correlated events. Moreover, extensibility may be provided by enabling a user to define rules to be triggered when events occur in a predetermined pattern, and actions to be executed when a predetermined rule triggers a correlated event. Further, to plug a new correlation engine into the system, adapters may be deployed to handle input and output, while the user-defined rules may be validating according to semantic requirements of the new correlation engine.

System and method for correlating events in a pluggable correlation architecture

A computer-implemented device provides security events from publishers to subscribers. There is provided a message bus, configured to contain a plurality of security events. Also provided is a receiver unit, responsive to a plurality of publishers, to receive the plurality of security events from the publishers. There is also a queue unit, responsive to receipt of the security events, to queue the plurality of security events in the message bus. Also, there is a transport unit, responsive to the security events in the message bus, to transport the plurality of security events in the message bus to a plurality of subscribers.

Computer-implemented method and system for security event transport using a message bus

Growing community of inventors

Washington, DC, United States of America

Michael Howard Cooper