Intelligent Automation, Inc.

Cryptonite, LLC

Renato Levy

Nicholas Evancich

Peng Liu

Jason Li

Joshua Brandon Tuttle

Andrew William Henderson

Guang Jin

Hongjun Li

Justin Yackoski

Hongmei Deng

Margaret Lyell

Brian Kambach

Brandon James Knapp

A shielding is provided to prevent attacks on network architecture or reduce the impact thereof. The system reconfigures the network differently for each user, operating system, and host and the configuration changes as time passes. The system can use dynamic redirection to create a reconfigurable network, and include intermediary nodes to dynamically reconfigure the network infrastructure for all traffic.

Self-shielding dynamic network architecture

A security control system is provided that works as an extra layer of defense as a way to prevent an 'attack' that is initiated by modifying either the 'jump' or the &#x201c;return&#x201d; addresses or both. The principal behind the security control system is to &#x201c;monitor&#x201d; the addresses to which the processors would jump, interrupt or return, and identify when these addresses are modified in a manner that does not comply with the normal execution of the processor. In order to do that the security control system uses existing structures in multi-core processors and even anticipates the creation of additional structures to expedite and improve such control.

Security control system for protection of multi-core processors

A method of generating graphical models for providing security analysis in computer networks that in one embodiment includes the steps of generating a type abstract graph independent of particular networks that models abstract dependency relationships among attributes and exploits; generating network-specific attack graphs by combining the type abstract graph with specific network information; monitoring an intruder alert; and generating a real-time attack graph by correlating the intruder alert with the network-specific attack graph. The real-time attack graph can be generated using reachability checking, bridging, and exploit prediction based on consequence alerts and may further include the step of calculating the likelihood of queries using a Bayesian network model. The method may also include the steps of inferring unobserved attacks that may have been missed by intrusion detection sensors, and projecting on which hosts and using what exploits additional intruder attacks may occur. The method may further include the step of comparing alternate actions by computation, wherein the alternate actions include the step of patching some vulnerabilities, and wherein the specific network information includes network topology. The specific network information may also include firewall rules.

Graphical models for cyber security analysis in enterprise networks

Growing community of inventors

North Potomac, MD, United States of America

Renato Levy