Matthew R Walsh

US Patent:

20200304537, Sep 24, 2020

Filed:

Jun 11, 2020

Appl. No.:

16/898756

Inventors:

- Palo Alto CA, US
Barrett Brown - Houston TX, US
Xiao (Raymoond) Tang - Singapore, SG
Alexandra Serenhov - Stockholm, SE
Chuo Hao Yeo - Singapore, SG
Ihar Zalutski - London, GB
Matthew Walsh - New York NY, US

International Classification:

H04L 29/06
H04L 12/24

Abstract:

A computer system may generate alerts related to a potential cyber attack an resource of an organization. The computer system may receive activity information associated with activity on a computer network of the organization, access contextual information about the resource, determine, based on the contextual information, select, based at least in part on the contextual information, one or more indicators that are indicative of a cyber attack against the resource to form a second plurality of indicators, and generate, based at least in part on the second plurality of indicators and the contextual information, a risk score, wherein the risk score indicates a probability that the resource is at risk of a cyber attack. In response to the risk score satisfying a threshold value, the computer system may generate an alert. Alerts may be presented using a graphical user interface. Analysts' actions may be tracked for review.

US Patent:

20180183827, Jun 28, 2018

Filed:

Oct 13, 2017

Appl. No.:

15/783512

Inventors:

- Palo Alto CA, US
Barrett Brown - Houston TX, US
Xiao (Raymoond) Tang - Singapore, SG
Alexandra Serenhov - Stockholm, SE
Chuo Hao Yeo - Singapore, SG
Ihar Zalutski - London, GB
Matthew Walsh - New York NY, US

International Classification:

H04L 29/06
H04L 12/24

Abstract:

A computer system may generate alerts related to a potential cyber attack an resource of an organization. The computer system may receive activity information associated with activity on a computer network of the organization, access contextual information about the resource, determine, based on the contextual information, select, based at least in part on the contextual information, one or more indicators that are indicative of a cyber attack against the resource to form a second plurality of indicators, and generate, based at least in part on the second plurality of indicators and the contextual information, a risk score, wherein the risk score indicates a probability that the resource is at risk of a cyber attack. In response to the risk score satisfying a threshold value, the computer system may generate an alert. Alerts may be presented using a graphical user interface. Analysts' actions may be tracked for review.