Sumo Logic, Inc.

Jask Labs Inc.

Scott Woods

Gregory Martin

Thomas Piscitell, Iii

David Matslofva

Brian Waskiewicz

One variation of a method for predicting and characterizing cyber attacks includes: receiving, from a sensor implementing deep packet inspection to detect anomalous behaviors on the network, a first signal specifying a first anomalous behavior of a first asset on the network at a first time; representing the first signal in a first vector representing frequencies of anomalous behaviors&#x2014;in a set of behavior types&#x2014;of the first asset within a first time window; calculating a first malicious score representing proximity of the first vector to malicious vectors defining sets of behaviors representative of security threats; calculating a first benign score representing proximity of the first vector to a benign vector representing an innocuous set of behaviors; and in response to the first malicious score exceeding the first benign score and a malicious threshold score, issuing a first alert to investigate the network for a security threat.

Growing community of inventors

San Francisco, CA, United States of America

Scott Woods