Alexander D Kent

US Patent:

7421576, Sep 2, 2008

Filed:

Jan 16, 2003

Appl. No.:

10/345265

Inventors:

Alexander Dale Kent - Los Alamos NM, US

Assignee:

The United States of America as represented by the United States Department of Energy - Washington DC

International Classification:

H04L 9/00

US Classification:

713155, 713153, 713168, 380277

Abstract:

Methods and systems in a data/computer network for authenticating identifying data transmitted from a client to a server through use of a gateway interface system which are communicately coupled to each other are disclosed. An authentication packet transmitted from a client to a server of the data network is intercepted by the interface, wherein the authentication packet is encrypted with a one-time password for transmission from the client to the server. The one-time password associated with the authentication packet can be verified utilizing a one-time password token system. The authentication packet can then be modified for acceptance by the server, wherein the response packet generated by the server is thereafter intercepted, verified and modified for transmission back to the client in a similar but reverse process.

US Patent:

20130254895, Sep 26, 2013

Filed:

Mar 14, 2013

Appl. No.:

13/826736

Inventors:

Alexander Kent - Los Alamos NM, US

International Classification:

H04L 29/06

US Classification:

726 25

Abstract:

Non-harmful data mimicking computer network attacks may be inserted in a computer network. Anomalous real network connections may be generated between a plurality of computing systems in the network. Data mimicking an attack may also be generated. The generated data may be transmitted between the plurality of computing systems using the real network connections and measured to determine whether an attack is detected.

US Patent:

20200028864, Jan 23, 2020

Filed:

Oct 24, 2018

Appl. No.:

16/168956

Inventors:

- Los Alamos NM, US
Alexander Kent - Los Alamos NM, US
Curtis Hash, JR. - Santa Fe NM, US
Michael Fisk - Los Alamos NM, US
Alexander Brugh - Los Alamos NM, US
Curtis Storlie - Jemez Springs NM, US
Benjamin Uphoff - Los Alamos NM, US

International Classification:

H04L 29/06
H04L 1/00
G06N 5/02
G06N 7/00
G06N 5/04

Abstract:

Non-harmful data mimicking computer network attacks may be inserted in a computer network. Anomalous real network connections may be generated between a plurality of computing systems in the network. Data mimicking an attack may also be generated. The generated data may be transmitted between the plurality of computing systems using the real network connections and measured to determine whether an attack is detected.

US Patent:

20190182281, Jun 13, 2019

Filed:

Feb 18, 2019

Appl. No.:

16/278225

Inventors:

- Los Alamos NM, US
Michael Edward Fisk - Los Alamos NM, US
Alexander William Brugh - Los Alamos NM, US
Curtis Byron Storlie - Jemez Springs NM, US
Benjamin Uphoff - Los Alamos NM, US
Alexander Kent - Los Alamos NM, US

Assignee:

Triad National Security, LLC - Los Alamos NM

International Classification:

H04L 29/06
G06N 5/02
G06N 7/00
H04L 1/00

Abstract:

A system, apparatus, computer-readable medium, and computer-implemented method are provided for detecting anomalous behavior in a network. Historical parameters of the network are determined in order to determine normal activity levels. A plurality of paths in the network are enumerated as part of a graph representing the network, where each computing system in the network may be a node in the graph and the sequence of connections between two computing systems may be a directed edge in the graph. A statistical model is applied to the plurality of paths in the graph on a sliding window basis to detect anomalous behavior. Data collected by a Unified Host Collection Agent (“UHCA”) may also be used to detect anomalous behavior.

US Patent:

20180109544, Apr 19, 2018

Filed:

Nov 10, 2017

Appl. No.:

15/809297

Inventors:

- Los Alamos NM, US
Michael Edward Fisk - Los Alamos NM, US
Alexander William Brugh - Los Alamos NM, US
Curtis Byron Storlie - Jemez Springs NM, US
Benjamin Uphoff - Los Alamos NM, US
Alexander Kent - Los Alamos NM, US

Assignee:

Los Alamos National Security, LLC - Los Alamos NM

International Classification:

H04L 29/06
G06N 7/00

Abstract:

A system, apparatus, computer-readable medium, and computer-implemented method are provided for detecting anomalous behavior in a network. Historical parameters of the network are determined in order to determine normal activity levels. A plurality of paths in the network are enumerated as part of a graph representing the network, where each computing system in the network may be a node in the graph and the sequence of connections between two computing systems may be a directed edge in the graph. A statistical model is applied to the plurality of paths in the graph on a sliding window basis to detect anomalous behavior. Data collected by a Unified Host Collection Agent (“UHCA”) may also be used to detect anomalous behavior.

US Patent:

20170163668, Jun 8, 2017

Filed:

Jan 30, 2017

Appl. No.:

15/419673

Inventors:

- Los Alamos NM, US
Michael Edward Fisk - Los Alamos NM, US
Alexander William Brugh - Los Alamos NM, US
Curtis Lee Hash - Santa Fe NM, US
Curtis Byron Storlie - Jemez Springs NM, US
Benjamin Uphoff - Los Alamos NM, US
Alexander Kent - Los Alamos NM, US

Assignee:

Los Alamos National Security, LLC - Los Alamos NM

International Classification:

H04L 29/06
G06N 7/00

Abstract:

A system, apparatus, computer-readable medium, and computer-implemented method are provided for detecting anomalous behavior in a network. Historical parameters of the network are determined in order to determine normal activity levels. A plurality of paths in the network are enumerated as part of a graph representing the network, where each computing system in the network may be a node in the graph and the sequence of connections between two computing systems may be a directed edge in the graph. A statistical model is applied to the plurality of paths in the graph on a sliding window basis to detect anomalous behavior. Data collected by a Unified Host Collection Agent (“UHCA”) may also be used to detect anomalous behavior.

US Patent:

20160277433, Sep 22, 2016

Filed:

May 26, 2016

Appl. No.:

15/165036

Inventors:

- Los Alamos NM, US
Alexander Kent - Los Alamos NM, US
Curtis Hash, JR. - Santa Fe NM, US

Assignee:

Los Alamos National Security, LLC - Los Alamos NM

International Classification:

H04L 29/06
G06N 5/02

Abstract:

Non-harmful data mimicking computer network attacks may be inserted in a computer network. Anomalous real network connections may be generated between a plurality of computing systems in the network. Data mimicking an attack may also be generated. The generated data may be transmitted between the plurality of computing systems using the real network connections and measured to determine whether an attack is detected.

US Patent:

20150020199, Jan 15, 2015

Filed:

Mar 14, 2013

Appl. No.:

14/382992

Inventors:

Joshua Charles Neil - Jemez Springs NM, US
Michael Edward Fisk - Los Alamos NM, US
Alexander William Brugh - Los Alamos NM, US
Curtis Byron Storlie - Jemez Springs NM, US
Benjamin Upoff - Los Alamos NM, US
Alexander Kent - Los Alamos NM, US

Assignee:

Los Alamos National Security, LLC - Los Alamos NM

International Classification:

H04L 29/06
H04L 1/00

US Classification:

726 23

Abstract:

A system, apparatus, computer-readable medium, and computer-implemented method are provided for detecting anomalous behavior in a network. Historical parameters of the network are determined in order to determine normal activity levels. A plurality of paths in the network are enumerated as part of a graph representing the network, where each computing system in the network may be a node in the graph and the sequence of connections between two computing systems may be a directed edge in the graph. A statistical model is applied to the plurality of paths in the graph on a sliding window basis to detect anomalous behavior. Data collected by a Unified Host Collection Agent (“UHCA”) may also be used to detect anomalous behavior.