The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 20, 2026

Filed:

Jul. 28, 2023
Applicant:

Wiz, Inc., New York, NY (US);

Inventors:

Itamar Gilad, Tel Aviv, IL;

Aviel Fogel, Tel Aviv, IL;

Udi Reitblat, Tel Aviv, IL;

Alon Schindel, Tel Aviv, IL;

Ami Luttwak, Binyamina, IL;

Roy Reznik, Tel Aviv, IL;

Yinon Costica, Tel Aviv, IL;

Assignee:

Wiz, Inc., New York, NY (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); H04L 63/1441 (2013.01);
Abstract

A system and method for reducing false positive detection of cybersecurity events is disclosed. The method includes: configuring a plurality of resources to deploy a sensor, each sensor configured to listen on a data link layer for an event; receiving from each sensor a plurality of events, each event including an event type; generating a group of resources having a common attribute; generating a noise metric for the group of resources based on a number of events of an event type; generating a threshold based on the noise metric; configuring each sensor of a resource from the group of resources to detect a number of events exceeding the threshold; detecting a cybersecurity event in response to determining that a first resource from the group of resources has a number of events of a first type exceeding the threshold; and initiating a mitigation action based on the detected cybersecurity event


Find Patent Forward Citations

Loading…