Alcatel Lucent

Bank of America Corporation

Alcatel

Timucin Ozugur

Snehal Desai

Jack Jachner

Jessy Victor Rouyer

Behcet Sarikaya

Ljubisa Tancevski

Gerard Damm

Randall Sharpe

Chao Kan

Dominique Verchere

Michael S Wengrovitz

Atiya Suhail

Aziz Mohammed

Sig Harold Badt, Jr

Mark Trenton Cimijotti

Hakki Cankaya

Frederick H Skoog

Kashipati G Rao

Fuming Wu

Jason P Jue

Kirit Mehta

Sudheer Mamidipaka

Christophe J Vuillaume

Sig Hal Badt, Jr

Sig Badt

Jason Jue

Jessy V Rouyer

A method for security threat identification using artificial intelligence/machine learning is provided. The method includes receiving code changes for a new version of an application code. New potential threats are determined for the new version of the application code based on the code changes and pre-trained code changes. A new potential threat score is determined based on the new potential threats and a current potential threat score of a current version of the application code. New pre-determined threats are determined for the new version of the application code based on a self-service threat model of the new version of the application code. A new pre-determined threat score is determined based on the new pre-determined threats and a current pre-determined threat score of the current version of the application code. A threat confidence level is determined based on the new potential threat score and the new pre-determined threat score.

System and method for security threat identification and resolution

Aspects related to cyberthreat remediation using a zero trust engine are provided. A cyberthreat remediation platform may receive information of cyberthreats and vulnerabilities for application associated with a network. The platform may train a zero trust engine to generate cyberthreat mappings comprising vulnerability-cyberthreat pairings based on the information. The platform may generate a cyberthreat record for an application based on a cyberthreat mapping. The platform may generate a cyberthreat level indicator for the application based on the cyberthreat record. The platform may compare the cyberthreat level indicator to a threshold to identify whether remediation actions should be initiated. Based on the comparison, the platform may initiate one or more remediation actions to resolve one or more cyberthreats.

Cyberthreat remediation using a zero trust engine

A system for enhancing multi-factor authentication comprises a processor associated with a server. The processor receives a first request with user identity data to access an application service from a user device. The processor generates a multi-factor authentication code to verify a user identity and a user device. The processor implements a customized operation rule with the multi-factor authentication code and a customized security code to generate an enhanced multi-factor authentication code. The processor presents the multi-factor authentication code to the user device with a response for the user to provide the enhanced multi-factor authentication code. The processor determines whether a user input code matches the enhanced multi-factor authentication code. In response to determining that the user input code matches the enhanced multi-factor authentication code, the processor authorizes the user device associated with the user to interact with the entity, such as, for example, to implement the application service.

System and method for enhancing multi-factor authentication

A system for detecting and mitigating application security threats comprises a processor associated with a server. The processor executes a static security model to analyze a group of development code sets for an application to detect threat objects. The processor determines that a number of threat objects in each development code set is lower than a threshold. The processor further executes a run-time security model to analyze the combined code sets to determine a set of threat object measurements of application product releases for the application. The processor generates a set of threat change ratios per application based on a first threat object measurement and the threat object measurements after the first threat object measurement. The processor determines threat change patterns of the threat change ratios associated with the application product releases for the application. The processor determines whether to trigger a development security model for the application.

Detecting and mitigating application security threats based on threat change patterns

A system for detecting and mitigating application security threats comprises a processor associated with a server. The processor analyzes a group of code sets of an application and determines a number of the threat objects in each code set. The processor further executes a run-time security model to analyze a combined code sets to determine threat object measurements and false positive measurements of application product releases for the application. The processor determines threat threshold ratios and false positive ratios per application. The processor further generates an array of quartile weights corresponding to a set of quartile ranges of the threat threshold ratios and a set of quartile ranges of the false positive ratios associated with the application. The processor generates an adjusted object measurement for the application based on a corresponding quartile weight in the array. The processor determines whether to trigger a development security model for the application.

Detecting and mitigating application security threats based on quantitative analysis

In a network having one or more Audio Video Bridging (AVB) devices, non-AVB bridges are detected by transmitting a maintenance message, such as a unicast linktrace message, from one AVB device such as a residential gateway to another AVB device such as a set-top box or IPTV. AVB devices in the path provide replies indicating whether the port on which the linktrace message was received is connected to a non-AVB bridge. The disclosure has utility in diagnostics problems with IPTV in a network.

Detecting legacy bridges in an audio video bridging network

A method, computer readable medium, and system for advertisement and content distribution are provided. Supplementary content is synchronized with advertisement slots, or commercial intervals, of a program stream and distributed via separate multicast group addresses. The program content is distributed via an alternative multicast group address during commercial intervals. Ports associated with respective users are mapped or otherwise associated with multiple multicast group addresses in a forwarding table thereby allowing distribution of supplementary content, or alternatively the program content, during commercial intervals.

System, method, and computer-readable medium for synchronizing multicast customized content to facilitate DSLAM complexity reduction

A presence system is provided with a communications device associated with a presentity that is capable of displaying a respective presentity presence state indicating a respective availability of the presentity as provided by a presence system to each contact on a contact list of the presentity. The communications device includes a presence user client communicatively coupled to the presence system to receive presence information associated with the presentity, in which the presence information includes the respective presentity presence states for the contacts on the contact list, and a display for displaying the contact list and a respective representation of the respective presentity presence state for each contact on the contact list.

System and method for representation of presentity presence states for contacts in a contact list

Apparatus, and an associated method, for facilitating performance of multi-media, and other communication, services at an Ethernet network. A bridge provides communication control operations at the Ethernet network. Audio-video bridge domains are defined at the network. Service discovery messages generated by communication devices of a particular domain are forwarded only to other communication devices of the same domain. Redefinition and reconfiguration of the domains is made, as needed, all best to facilitate performance of the communication service.

Apparatus, and associated method, for facilitating multi-media service in an ethernet network

A method and an Ethernet local area network are described herein in which the Ethernet local area network is configured to enable a talking device (e.g., microphone) to send a media stream to one or more listening devices (e.g., speakers). In one embodiment, the method for configuring the Ethernet local area network includes the following steps: (1) providing a user of a talking device with a 'relevant' catalog which contains information including positional information about one or more listening devices; (2) allowing the user to interface with the 'relevant' catalog so they can select at least one of the listening device(s); (3) enabling the talking device to send a subscribe-request message to the selected listening device(s) requesting that the selected listening device(s) subscribe to the talking device; (4) and sending a media stream from the talking device to the selected listening device(s).

Ethernet equipment utilizing catalogs and continuity checks to enhance UPnP and AVB applications

The adjustability of a watcher's level of access to a presentity's presence information is enhanced by providing for the filtering of the presence information based on information that is provided by a source other than the watcher.

Presentity filtering for user preferences

An operation is performed for executing a plurality of first-level queries. Execution of each first level query determines if a respective type of operational condition exists within a network. If needed due to the quantity of first-level queries, the first-level queries are executed in a sampled manner such that less than all of the first-level queries are applied to a specified collection of network elements of the network during each one of a plurality of instances of executing the first-level queries being performed and such that all of the first-level queries are applied to the specified collection of network elements in accordance with a prescribed query execution timeframe. An operation is performed for executing a second-level query in response to one of the first-level queries determining that the respective type of operational condition exists within the network. Executing the second-level query results in determination of diagnostic information specific to the determined type of operational condition.

Network management system with adaptive sampled proactive diagnostic capabilities

A system, method and computer readable medium for service creation via presence messaging comprising assigning an information exchange state associated with a presence message and directing the presence message to at least one of a service provider from a predetermined set of service providers.

Service creation via presence messaging

A presence-based transaction tracking method and system for communicating transaction information over a data network in which a sensing device in a host network associated with a transaction publishes presence information associated with a sensed transaction state to a server. A watcher subscribes to the server for receiving the presence information in which a middleware application can enable a watcher access across disparate client messaging systems.

Architecture for presence based transaction tracking across multiple devices and clients

System and method for coupling an IM session with a PBX call session are described. One embodiment is a multimedia session manager system comprising a first controller for controlling telephony services to a plurality of terminals; and a second controller for controlling IM services to a plurality of user communications devices; and wherein, responsive to application of a private branch exchange ('PBX') service to a telephony call, the second controller automatically applies a corresponding IM service to an IM session associated with the telephony call.

Growing community of inventors

Fairview, TX, United States of America

Timucin Ozugur