Ironnet Cybersecurity, Inc.

Amazon Technologies, Inc.

Patrick Collard

Michael Lowney

Stephen Kinser

Alexander Michael Conn

Phillip Baker Schafer

John Schweitzer

Wayne Alan Fullen

Jared Sylvester

William Kupersanin

Sai Srinivas Vemula

Catherine Watkins

Luke Kenneth Schubert

Ravi Karnam

Evripidis Paraskevas

Elisabeth Margaret Nagy

Stephen Goodman

Jacob Nguyen

Described are systems and methods for determining a reputation score and/or a confidence score for a network identifier that represents, respectively, a likelihood that the network identifier presents a threat and/or a likelihood that the network activity associated with the network identifier corresponds to a port scanning, enumeration, or other malicious event. Embodiments of the present disclosure can utilize various network telemetry information, such as authentication activity, outbound traffic activity, web activity, honeypot connection activity, or network classification information to determine the reputation and/or confidence scores in response to a query/request and/or in connection with potentially malicious activity that can represent a likelihood that the detected potentially malicious activity is malicious/legitimate and the potential impact that remediation measures taken against the network identifier may have in the event that the detected network activity was legitimate.

Reputation and confidence scoring for network identifiers based on network telemetry

Methods and systems for the detection, identification, analysis of cybersecurity events in order to support prevention of the persistence of threats, malware or other harmful events are provided. The methods and systems of the present invention enable a user to find similar anomalous network traffic within a single network or across multiple networks. The methods and systems identify and correlate activity in order to analyze potential threats within a network by providing broader contextual information about how those threats relate to other activity within the network or across a sector or country.

Systems and methods for analyzing cybersecurity events

Growing community of inventors

Arlington, VA, United States of America

Patrick Collard