Microsoft Technology Licensing, LLC

Michael Shlomo Navat

Idan Yehoshua Hen

Itay Argoety

Yoel Benharrous

Efrat Reef Guttman

Omri Manor

Computational/communication system security tools are provided. Such tools report at least one multi-dimensional (or multi-component) data-object (based on the monitored events) to an administrator of the system. The multiple components of the data object provide multiple risk indicators (e.g., risk scores) along various dimensions of security for such systems. Thus, tools provide multi-dimensional monitoring and reporting of risks and security threats to computational/communication systems. The tools may also provide at least one risk mitigation action (e.g., quarantining and/or prohibiting particular risky entities, entity groups, and/or entity activities) based on the enhanced monitoring and detection methods presented herein.

Multi-dimensional risk assesment, reporting, and mitigation for computational and communication systems

Conditionally initiating a security measure in response to an estimated increase in risk imposed related to a particular user of a computing network. The risk is determined using a rolling time window. Accordingly, sudden increases in risk are quickly detected, allowing security measures to be taken quickly within that computing network. Thus, improper infiltration into a computing network is less likely to escalate or move laterally to other users or resources within the computing network. Furthermore, the security measure may be automatically initiated using settings pre-configured by the entity. Thus, the security measures go no further than what the entity instructed, thereby minimizing risk of overreaching with the security measure.

Growing community of inventors

Tel Aviv-Jaffa, Israel

Michael Shlomo Navat