Accenture Global Solutions Limited

Nice Ltd

Tomer Ram

Gal Engelberg

Dan Klein

Benny Rochwerger

Leonard Michael Newnham

Moshe Hadad

Ofir Ventura

Facundo Bellosi

Implementations are directed to receiving graph data representative of a process-aware AAG that is representative of potential lateral movement of adversaries within a computer network, receiving risk profile data representative of a risk profile of an enterprise with respect to two or more risk aspects, generating, by a process-aware risk assessment module, a risk assessment based on the process-aware AAG and the risk profile, and generating, by a mitigation simulator module, a mitigation list based on the process-aware AAG, the risk profile, and the risk assessment, the mitigation list comprising a prioritized list of two or more facts of the process-aware AAG. Other implementations of this aspect include corresponding systems, apparatus, and computer programs, configured to perform the actions of the methods, encoded on computer storage devices.

Automated prioritization of process-aware cyber risk mitigation

Methods, systems, and computer-readable storage media for receiving a AAG from computer-readable memory, generating from logical network ontology data, asset inventory data, and asset communication data, a logical topology of the enterprise network as a computer-readable data structure, defining, at least partially by executing community detection over the logical topology, a sub-set of groups within the enterprise network, each group representing a process of a plurality of process, each process being at least partially executed by one or more assets within the enterprise network, processing the AAG based on the sub-set of groups and data from one or more contextual data sources to provide the process aware AAG, the process aware AAG defining a mapping between an infrastructure-layer of the enterprise network and a process-layer of the enterprise network, and executing one or more remedial actions in the enterprise network in response to analytics executed on the process aware AAG.

Extracting process aware analytical attack graphs through logical network analysis

Methods, systems, and computer-readable storage media for receiving a process aware AAG from computer-readable memory, the process aware AAG having been generated from the AAG, processing the process aware AAG to consolidate asset nodes to group nodes at least partially by providing metadata describing an asset node to a set of properties of a group node and pruning the asset node and any child nodes of the asset node from the process aware AAG, providing the aggregation graph by identifying relationships between group nodes and, for each relationship, inserting an edge between group nodes, and aggregating one or more of a set of node properties and a set of edge properties for each group node or edge, respectively, storing the aggregation graph to computer-readable memory, and executing one or more remedial actions in the enterprise network in response to analytics executed on the aggregation graph.

Executing enterprise process abstraction using process aware analytical attack graphs

A combination of two or more offers may be selected from a plurality of offers to be served to potential respondents, in a method performed using one or more processors in a computing system. The method of selecting may comprises receiving a request for a selection of a combination of two or more offers from the sets of offers; in response to the request: performing a series of selection operations each resulting in the selection of one offer to be included in the combination, each selection operation being carried out according to a respective model including one or more variables. The variables of the model for the second and any subsequent selection operation may include at least one selected offer from a previous selection operation. A signal identifying the selected offers may be output to cause the combination of the selected offers to be served to a respondent.

Offer selection using sequential selection operations

A computing system is configured to categorize digital data records each relating to an interaction between a call center agent and a customer. The system includes a rules module to determine a first probability that a data record belongs to a category based one or more rules each rule defining a relationship between one or more features of the data record and the category; a probabilistic module to determine a second probability that the data record belongs to the category based on one or more probabilistic models of relationships between one or more of the features and the category; an arbitration module to determine whether or not the data record belongs to the category based on the first and second probabilities; and an action module to receive from the arbitration processor an indication that the interaction belongs to the category and to initiate an action appropriate to the category.

Growing community of inventors

Netanya, Israel

Tomer Ram