The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 24, 2024

Filed:

Jun. 02, 2021
Applicant:

Rapid7, Inc., Boston, MA (US);

Inventors:

Dustin Myers, Alexandria, VA (US);

Vasudha Shivamoggi, Cambridge, MA (US);

Roy Hodgman, Cambridge, MA (US);

Assignee:

Rapid7, Inc., Boston, MA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); H04L 41/142 (2022.01); H04L 43/04 (2022.01); H04L 43/062 (2022.01); H04L 43/065 (2022.01); H04L 43/067 (2022.01); H04L 43/16 (2022.01);
U.S. Cl.
CPC ...
H04L 63/1425 (2013.01); H04L 41/142 (2013.01); H04L 43/04 (2013.01); H04L 43/062 (2013.01); H04L 43/065 (2013.01); H04L 43/067 (2013.01); H04L 43/16 (2013.01); H04L 63/1441 (2013.01);
Abstract

Disclosed herein are methods, systems, and processes for detecting data exfiltration. A data exfiltration event in a network is detected. Traffic data regarding outgoing traffic of a source in the network associated with the data exfiltration event is received. A logarithmic transformation is applied to the traffic data to generate transformed data. An outlier identification technique is selected based on the transformed data and is executed on the transformed data to determine that the outgoing traffic is indicative of the data exfiltration event. An alert is generated in response to the determination that the outgoing traffic is indicative of the data exfiltration event.


Find Patent Forward Citations

Loading…