John M Sipple

US Patent:

20150101053, Apr 9, 2015

Filed:

Sep 26, 2014

Appl. No.:

14/498776

Inventors:

- McLean VA, US
John A. SIPPLE - Germantown MD, US

International Classification:

H04L 29/06

US Classification:

726 24

Abstract:

An approach for detecting an insider threat is described. Embodiments include determining one or more features from one or more network transfers among a plurality of network entities, determining a baseline behavioral profile of the plurality of network entities based on the one or more features; and determining at least one malicious network entity from among the plurality of network entities based on a systematic deviation from the baseline behavioral profile of at least one of the one or more features.

US Patent:

20140095425, Apr 3, 2014

Filed:

Sep 28, 2012

Appl. No.:

13/631787

Inventors:

- McLean VA, US
John A. Sipple - Germantown MD, US

Assignee:

Sphere of Influence, Inc. - McLean VA

International Classification:

G06N 5/02

US Classification:

706 52

Abstract:

A method and apparatus for predicting significant future events based on previous events. Plural messages representing events are received. Attributes of the messages are mapped to respective feature dimensions to define a multidimensional histogram. Co-occurrence of at least two event types are determined based on queries of the multidimensional histogram. Anomalous event types are detected from the messages by comparing feature dimensions of incoming messages to probability density functions of the cluster corresponding to the event type and highly anomalous event types are determined. Causal relationships between each pair of event types are determined and a Bayesian belief network of the pairs of event types is created and used to predict future events based on occurrence of additional events.