The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 21, 2026

Filed:

Sep. 12, 2024
Applicant:

International Business Machines Corporation, Armonk, NY (US);

Inventors:

Christopher A. Kulakowski, Austin, TX (US);

Joshua J. Powers, Round Hill, VA (US);

Mauro Marzorati, Lutz, FL (US);

John A. Adams, Pleasant Hill, MO (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01);
Abstract

Automatically identifying join keys to correlate events is provided. A group of fields of a plurality of fields corresponding to a plurality of events having a percentage of cardinality and entropy of values greater than a defined threshold percentage level for the cardinality and the entropy is identified as a group of join keys corresponding to the plurality of events that occurred within a defined timeframe. It is determined which particular join keys of the group of join keys corresponding to the plurality of events that occurred within the defined timeframe are common join keys among the plurality of events. Pairs of events in the plurality of events that occurred within the defined timeframe are correlated based on the common join keys between each pair of events to form a set of correlated event pairs for detecting threats.


Find Patent Forward Citations

Loading…