The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 08, 2019

Filed:

May. 31, 2016
Applicant:

Exabeam, Inc., San Mateo, CA (US);

Inventors:

Derek Lin, San Mateo, CA (US);

Barry Steiman, San Ramon, CA (US);

Domingo Mihovilovic, Menlo Park, CA (US);

Sylvain Gil, San Francisco, CA (US);

Assignee:

Exabeam, Inc., San Mateo, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 17/30 (2006.01); G06F 21/50 (2013.01); G06F 21/56 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 63/1408 (2013.01); G06F 17/3053 (2013.01); G06F 21/50 (2013.01); G06F 21/566 (2013.01); H04L 63/104 (2013.01); H04L 63/1416 (2013.01); H04L 63/1425 (2013.01); H04L 63/1466 (2013.01);
Abstract

The present disclosure describes a system, method, and computer program for identifying and classifying service accounts in a network based on account behavior. For each evaluated account in the network, a plurality of behavior indicators are calculated. The behavior indicators correspond to service account behaviors and, for each account, are calculated based on network events associated with the account. Each behavior indicator is compared to a threshold specific to the corresponding behavior. If one or more behavior indicators for an account satisfies the applicable threshold, the account is deemed to display service account behavior. Consistency in which an account displays service account behavior is factored into classifying accounts as service accounts.


Find Patent Forward Citations

Loading…