Triad National Security, LLC

Ip2ipo Innovations Limited

Nicholas A Heard

Alexander Kent

Melissa J M Turcotte

A framework is provided for modeling the activity surrounding user credentials and/or machine level activity on a computer network using computer event logs by viewing the logs attributed to each user as a multivariate data stream. The methodology performs well in detecting compromised user credentials at a very low false positive rate. Such a methodology may detect both users of compromised credentials by external actors and otherwise authorized users who have begun engaging in malicious activity.

Growing community of inventors

Kent, United Kingdom

Nicholas A Heard