The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 17, 2021

Filed:

Aug. 02, 2018
Applicant:

Chronicle Llc, Mountain View, CA (US);

Inventors:

Carey Stover Nachenberg, Manhattan Beach, CA (US);

William S. Robinson, Menlo Park, CA (US);

Shapor Naghibzadeh, San Francisco, CA (US);

Michael Wiacek, Mountain View, CA (US);

Abu Wawda, Cupertino, CA (US);

Assignee:

Chronicle LLC, Mountain View, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/55 (2013.01); G06F 16/2455 (2019.01);
U.S. Cl.
CPC ...
G06F 21/552 (2013.01); G06F 16/2455 (2019.01); G06F 2221/034 (2013.01);
Abstract

The subject matter of this specification generally relates to computer security. In some implementations, a method includes maintaining a first data structure that stores arrays of identifier tuples. Each identifier tuple corresponds to a respective computer security event and includes one or more identifiers for a computing element associated with the computer security event. Each array of identifier tuples corresponds to a respective identifier and only includes identifier tuples that include the corresponding identifier. A second data structure that stores arrays of computer security data is maintained. Each array of computer security data corresponds to a respective identifier tuple stored in the first data structure and only includes computer security data associated with each identifier in the corresponding identifier tuple. A query that specifies a first identifier for a first computing element is received. Identifier tuples that each include the first identifier are obtained from the first data structure.


Find Patent Forward Citations

Loading…