Christopher Lewis Day

Address:

4810 Marabou Way, Colorado Spgs, CO 80911

VIN:

KNADE123676241274

Make:

KIA

Model:

RIO

Year:

2007

US Patent:

7017186, Mar 21, 2006

Filed:

Jul 30, 2002

Appl. No.:

10/208485

Inventors:

Christopher W. Day - Biscayne Park FL, US

Assignee:

Steelcloud, Inc. - Herndon VA

International Classification:

G06F 11/00
G06F 15/173

US Classification:

726 23, 726 22, 709224

Abstract:

An intrusion detection system (IDS). An IDS which has been configured in accordance with the present invention can include a traffic sniffer for extracting network packets from passing network traffic; a traffic parser configured to extract individual data from defined packet fields of the network packets; and, a traffic logger configured to store individual packet fields of the network packets in a database. A vector builder can be configured to generate multi-dimensional vectors from selected features of the stored packet fields. Notably, at least one self-organizing clustering module can be configured to process the multi-dimensional vectors to produce a self-organized map of clusters. Subsequently, an anomaly detector can detect anomalous correlations between individual ones of the clusters in the self-organized map based upon at least one configurable correlation metric. Finally, a classifier can classify detected anomalous correlations as one of an alarm and normal behavior.

US Patent:

7020476, Mar 28, 2006

Filed:

Dec 23, 2002

Appl. No.:

10/329232

Inventors:

Christopher W. Day - Biscayne Park FL, US
Joseph M. Patterson - Coconut Creek FL, US

Assignee:

Steelcloud, Inc. - Herndon VA

International Classification:

H04Q 7/20

US Classification:

4554565, 4554561, 455421, 455502

Abstract:

The present invention is secure wireless network. The secure wireless network can include multiple receiver nodes coupled to corresponding high-precision clocks. Each of the receiver nodes can be configured to receive wireless frames transmitted both within and outside a secured geographic area covered by the secure wireless network. A master synchronization high-precision clock can be coupled to the corresponding high-precision clocks. Additionally, a position location system can be coupled to the receiver nodes. Specifically, the position location system can be programmed to compute estimated positions for individual ones of wireless nodes transmitting the wireless frames. Finally, access management logic can be coupled to the position location system. More particularly, the access management logic can be configured to manage access to the wireless network by the individual ones of the wireless nodes based upon the computed estimated positions.

US Patent:

7260846, Aug 21, 2007

Filed:

Mar 3, 2006

Appl. No.:

11/367950

Inventors:

Christopher W. Day - Biscayne Park FL, US

Assignee:

Steelcloud, Inc. - Herndon VA

International Classification:

G06F 11/00

US Classification:

726 23, 726 11, 726 13, 726 14, 726 25, 726 27, 713194, 709223

Abstract:

An intrusion detection system (IDS). An IDS which has been configured in accordance with the present invention can include a traffic sniffer for extracting network packets from passing network traffic; a traffic parser configured to extract individual data from defined packet fields of the network packets; and, a traffic logger configured to store individual packet fields of the network packets in a database. A vector builder can be configured to generate multi-dimensional vectors from selected features of the stored packet fields. Notably, at least one self-organizing clustering module can be configured to process the multi-dimensional vectors to produce a self-organized map of clusters. Subsequently, an anomaly detector can detect anomalous correlations between individual ones of the clusters in the self-organized map based upon at least one configurable correlation metric. Finally, a classifier can classify detected anomalous correlations as one of an alarm and normal behavior.

US Patent:

8572744, Oct 29, 2013

Filed:

May 2, 2005

Appl. No.:

11/120023

Inventors:

Christopher Day - Biscayne Park FL, US
Cem Gurkok - Coral Gables FL, US

Assignee:

SteelCloud, Inc. - Ashburn VA

International Classification:

G06F 11/00

US Classification:

726 25, 726 23

Abstract:

An information security auditing and incident investigation method can include applying a correlation template to query different audit targets in an enterprise system to provide a complete result set for the query across different audit targets, receiving audit data provided in response to the query and rendering the audit data to produce an audit report. The applying step can include distributing one or more distributed audit and response tools to each of the targets in the enterprise and communicating with the targets in the enterprise to acquire audit data from each of the targets. The receiving step can include organizing the audit data in a hierarchy, and recursively walking the hierarchy as a directed, cyclic graph noting memberships and paths. Finally, the rendering step can include generating a graphical visualization interface, disposing a real-time object browser within the interface, and further disposing a differential report in the interface.

US Patent:

20140245439, Aug 28, 2014

Filed:

Feb 17, 2012

Appl. No.:

13/399116

Inventors:

Christopher Wayne Day - Miami Beach FL, US

International Classification:

G06F 21/00

US Classification:

726 23

Abstract:

Systems and methods are provided for handling a malicious computer-related security event that occurs at central network access points of the Internet involving networks of autonomous and different internet service providers. A system includes a non-signature based security event detection software system operating on a first computer connected to a first network of a first internet service provider, where the non-signature based security event detection software system detects the security event by examining runtime state of the first computer. A security event management software system operates on a processor-based platform and has access to security event detection results generated by the non-signature based security event detection software system.