Bank of America Corporation

Michael Thomas Malarkey

Brandon Sloane

Elizabeth R Liuzzo

Brian Diederich

John Brian Costello

Christopher P Schafer

Eric R Camarata

A system for identifying and remediating data exfiltration paths is provided. In particular, the system may generate a map of the network environment which identifies all of the possible pathways and the steps of such pathways through which sensitive data may be exfiltrated. The system may then evaluate the potential impact associated with each exfiltration pathway and generate a prioritization scheme which may sort the pathways by their potential impacts. Based on the prioritization scheme, the system may, via a machine learning engine, provide one or more remediation processes that may be executed to reduce the chance of data exfiltration through certain potentially high-impact pathways.

System for automated electronic data exfiltration path identification, prioritization, and remediation

Systems, computer program products, and methods are described herein for regulating exposure based secured access is presented. The present invention is configured to receive, from a user computing device, a request to access a network device to execute one or more actions, wherein the user computing device is associated with a payment token; receive information associated with the one or more actions, wherein the information comprises an exposure level; initiate an authorization module associated with the distributed network environment; determine, using the authorization module, a token amount to execute the one or more actions; automatically retrieve, from the user computing device, the token amount from the payment token; authorize the user computing device to access the network device to execute the one or more actions; and access and update a blockchain distributed ledger based on information associated with the request and subsequent authorization to access the network device.

Exposure based secure access system

Systems and methods for enterprise cybersecurity triaging of emails suspected of malicious content. Triaging may include analyzing threat level of email submitted for cybersecurity review. The systems and methods may deconstruct an email into components scorable for threat type and/or threat level. The systems and methods may include multiple dynamically selectable threat scoring modules. Email threat level may be based on component scores. Evaluated emails and scored components may be stored. Cybersecurity threat analysis may include comparison of the email and/or the scorable components against previously stored evaluated emails and previously stored scored components. Triaging may include identifying enterprise response teams experienced in the threat type and/or threat level of the email and/or of its components. Triaging may include preventing infiltration of an enterprise by malicious emails. The systems and methods may include feedback to enterprise associates regarding detecting and handling potentially malicious emails.

Growing community of inventors

Waxhaw, NC, United States of America

Michael Thomas Malarkey