Deutschetelekom Ag

Nanyang Technological University

Ben-gurion University of the Negev Research and Development Authority

Polina Zilberman

Rami Puzis

Yuval Elovici

Anupam Chattopadhyay

Oliver Holschke

Ingmar Poese

Siew Kei Lam

Aviad Elitzur

Thambipillai Srikanthan

Elad Rapaport

Jawad Haj-Yahya

Elad Marco

A framework for efficiently and automatically exploring a data network and accurately identifying network threats, which comprises a plurality of software and hardware-based agents, distributed over the data network. The agents are capable of adjusting or reconfiguring, on the fly, the behavior of the agents and their ability to collect data in a targeted manner, so as to investigate suspicious incidents and alerts and collect data that was not yet collected by the system; collecting forensic data by executing tasks defined in workflows, being distributed threat intercepting programs and reporting about the collected forensic data, back to a Central Control Unit (C&C). Distributed threat intercepting programs ('workflows') are used to provide instructions to agents, to perform branching and provide instructions to the Central Control Unit (C&C), which orchestrates the agents to assure proper execution of the workflows; analyzes the collected information and presents ongoing status to an operator supervising the data network.

Bio-inspired agile cyber-security assurance framework

A system for early predicting of impending data overflow situations in data networks, comprising one or more sensors being networked computers that do not provide services, for collecting monitored data regarding network traffic volume from content providers to an Internet Service Provider (ISP) entering or exiting the ISP via peering autonomous systems connected to the ISP via physical links; one or more processors executing one or more deep learning models, being adapted to: identify over the data network being handovers alternative peering links, which are not inherent Private Network Interconnects (PNI) between the content providers and the ISP; determine static or dynamic threshold for dataflow anomaly associated with overflow; for each alternative handover, predict impending overflow situation by applying ML algorithms to the collected data that corresponds to the each alternative handover.

System and method for predicting and handling short-term overflow

Growing community of inventors

Eshkolot, Israel

Polina Zilberman