Michael J Benjamin

US Patent:

20220210124, Jun 30, 2022

Filed:

Dec 29, 2021

Appl. No.:

17/564927

Inventors:

- Bloomfield CO, US
Michael Benjamin - Broomfield CO, US
Peter Brecl - Highlands Ranch CO, US

Assignee:

Level 3 Communications, LLC - Broomfield CO

International Classification:

H04L 9/40

Abstract:

Examples of the present disclosure describe systems and methods for providing enhanced security in edge computing environments. A first aspect describes a method for moving security features dynamically applied to an application at a first deployment location to an application at a second deployment location. A second aspect describes a method for locally expanding/contracting an instance of a deployed application. A third aspect describes a method for redirected network traffic associated with detected malicious conduct from a first application deployment environment to a secured second application deployment environment. A fourth aspect describes a method for performing multi-stage network traffic filtering.

US Patent:

20220191175, Jun 16, 2022

Filed:

Mar 4, 2022

Appl. No.:

17/687050

Inventors:

- Broomfield CO, US
Michael Benjamin - Broomfield CO, US

Assignee:

Level 3 Communications, LLC - Broomfield CO

International Classification:

H04L 9/40
H04L 43/028
H04L 61/5007
H04L 41/0816
H04L 67/10
H04L 61/4511

Abstract:

Systems and methods for implementing filters within computer networks include obtaining blocklist data that includes blocklist entries for a network. Each of the blocklist entries includes one or more network traffic attributes for identifying traffic to be blocked. In response to receiving the blocklist data, a filter based on a common network traffic attribute shared between at least two of the plurality of blocklist entries is generated. The filter is then deployed to a network device within the network such that the filter may be implemented at the network device to block corresponding traffic.

US Patent:

20230075296, Mar 9, 2023

Filed:

Aug 23, 2022

Appl. No.:

17/821598

Inventors:

- Broomfield CO, US
Jamie LIN - St. Louis MO, US
Michael BENJAMIN - Broomfield CO, US
John KNIES - Evansville IN, US

Assignee:

Level 3 Communications, LLC - Broomfield CO

International Classification:

H04L 9/40

Abstract:

Authorization for a user may be dynamically tailored per application or per application function, rather than globally managed by an administrator. For example, in some embodiments, an identity access management system may generate a suitable authorization token (or authorization token information) to enable a user to login to an application or perform a particular function. The authorization token may be dynamically generated and tailored based on filtering various identity information otherwise available from an identity system, access boundaries of applicable application functions, or other factors.

US Patent:

20230051880, Feb 16, 2023

Filed:

May 25, 2022

Appl. No.:

17/664920

Inventors:

- Broomfield CO, US
Michael Benjamin - Broomfield CO, US

Assignee:

Level 3 Communications, LLC - Broomfield CO

International Classification:

H04L 9/40

Abstract:

The present application describes a system that uses endpoint data and network data to detect an anomaly. Once an anomaly is detected, the system may determine a severity of the anomaly by comparing the anomaly to a global database of known anomalies. The system may then initiate preventative measures to address the anomaly.

US Patent:

20210160278, May 27, 2021

Filed:

Sep 18, 2020

Appl. No.:

17/025769

Inventors:

- Broomfield CO, US
Michael Benjamin - Broomfield CO, US

International Classification:

H04L 29/06
H04L 9/32

Abstract:

Aspects of the present disclosure involve systems and methods for utilizing verified autonomous system (AS) network interconnections received via a cryptographically certified Recognized Operating Agency (ROA) object to generate an interconnect network model which may be used as a reference model to mitigate hijacking of network communications in downstream route announcements. In particular, AS networks may announce or share a cryptographically certified ROA object that includes a list of other AS networks to which the announcing network is connected. A router, server, or other networking device may receive ROA objects from multiple AS networks and generate a model or graph of the interconnectedness of the AS networks. Further, because each ROA object may be cryptographically certified or signed, the networking device may trust the information provided in the received ROA objects. The networking device may further verify announced routing information against the generated network model.

US Patent:

20200329072, Oct 15, 2020

Filed:

Apr 10, 2020

Appl. No.:

16/845799

Inventors:

- Broomfield CO, US
Michael BENJAMIN - Broomfield CO, US
Mark DEHUS - Thornton CO, US
Peter BRECL - Highlands Ranch CO, US

International Classification:

H04L 29/06
G08B 21/18

Abstract:

Aspects of the present disclosure involve utilizing network threat information to manage one or more security devices or policies of a communication network. The security system may receive threat intelligence data or information associated with potential threats to a communications network and process the threat intelligence data to determine one or more configurations to apply to security devices of a network. The system may then generate a rule or action to respond to the identified attack, such as a firewall rule for a firewall device to block traffic from the source of the attack. The threat intelligence information may include a confidence score indicating a calculated confidence in the identification of the malicious communications, which may be utilized by the system to determine the type of action taken on the security devices of the network in response to the information or data.

US Patent:

20200195508, Jun 18, 2020

Filed:

Nov 13, 2019

Appl. No.:

16/682796

Inventors:

- Broomfield CO, US
Michael Benjamin - Broomfield CO, US

International Classification:

H04L 12/24
H04L 29/06
H04L 29/08
H04L 12/733

Abstract:

Systems and methods for managing network devices include performing clustering operations for network devices based on attributes of the network devices. By comparing the results of subsequent clustering operations, changes in network device attributes can be readily identified and any network devices for which attributes have changed may be subject to further investigation or remedial action (e.g., blocking traffic to/from the network device). Clustering may also be used to conduct an inventory of network devices by identifying groups of network devices that have similar attributes.

US Patent:

20200186499, Jun 11, 2020

Filed:

Nov 13, 2019

Appl. No.:

16/682836

Inventors:

- Broomfield CO, US
Michael Benjamin - Broomfield CO, US

International Classification:

H04L 29/06
H04L 12/26
H04L 29/12
H04L 12/24
H04L 29/08

Abstract:

Systems and methods for implementing filters within computer networks include obtaining blocklist data that includes blocklist entries for a network. Each of the blocklist entries includes one or more network traffic attributes for identifying traffic to be blocked. In response to receiving the blocklist data, a filter based on a common network traffic attribute shared between at least two of the plurality of blocklist entries is generated. The filter is then deployed to a network device within the network such that the filter may be implemented at the network device to block corresponding traffic.