Bank of America Corporation

Fmr Corp.

Sean Catlett

Chad Renfro

Mian Zhou

Daniel Shnowske

Sean Wang

Han Zhou

William Scott Treadwell

Robert A Lang

Xu He

Chris Higgins

Paulina Li

Matt Hinman

Paulina (Pu) Li

Methods and apparatuses are described for enterprise access control governance in a computerized information technology (IT) architecture. A server generates a first vector space, each node in the first space representing a user of resources in the IT architecture and including attributes of the user. The server generates a second vector space, each node in the second space representing an entitlement to access resources in the IT architecture and including attributes of the entitlement. The server creates an entitlement utility matrix by mapping nodes in the first space to nodes in the second space. The server determines a set of recommended entitlements for a plurality of users based upon the utility matrix. The server determines a discrepancy between the set of recommended entitlements for a first user and a set of existing entitlements for the first user and adjusts the set of existing entitlements based upon the discrepancy.

Access control governance using mapped vector spaces

False honeytoken data is generated, stored, and disseminated to a criminal organization such as an online banking fraud ring. After dissemination of the data, access attempts using the false honeytoken data are identified at an online banking web server or other organization resource. Data associated with the fraudulent access attempt, such as a source IP address, physical address, or related customer account numbers, are retrieved and stored so that this data may be compiled, analyzed, and used for tracking fraud rings.

Detection and tracking of unauthorized computer access attempts

Systems, methods and consumer-readable media for providing content-aware document analysis and modification are provided. A system for analyzing document content according to the invention may include a rules server that stores a set of expressions. Such expressions may define predetermined confidential information and/or patterns of confidential expressions. The system may further include a communication plugin that provides a platform for incorporating the set of confidential expression patterns as part of a document-producing application. Following incorporation of the communication plugin, an inline document monitor module according to the invention may form part of the document-producing application. The inline document monitor may monitor for the occurrence of at least one of the set of confidential expression patterns in a document.

Systems and methods for providing content aware document analysis and modification

Apparatus and method for managing risk in an environment where information is received regarding a problem in an environment. A security risk is analyzed associated with the problem. Controls associated with the environment containing the problem are analyzed. A framework is generated defining one or more controls for mitigating the security risk responsive to the analyzed security risk and controls.

Control framework generation for improving a security risk of an environment

A system and method for analyzing Intrusion Detection System (IDS) alert data associated with a computer network is described. The method includes applying first association rules to obtained IDS alert data associated with a computer network and processing the obtained IDS alert data with the first association rules. Analyst feedback data associated with the processed obtained IDS alert data is received, and a training data set from the analyst feedback data is received. New association rules are determined based upon the training data set, and the new association rules are outputted to a display of a computing device. Outputting the new association rules may include outputting patterns within the IDS alert data of false positive alerts. The new association rules may be applied back to the obtained IDS alert data.

Intrusion detection system alerts mechanism

Growing community of inventors

Dallas, TX, United States of America

Sean Catlett