IP Library Granted Patent US 10,158,653
Granted Patent B1
US 10,158,653 · App. 14/959,608 · Granted Dec 18, 2018

Artificial intelligence with cyber security

Inventors: Arnold Magcale (Pleasanton, CA); Daniel Kekai (Pleasanton, CA)
Assignee: Nautilus Data Technologies, Inc.
H04L63/1416G06N3/063G06N3/08H04L63/1425H04L63/1441
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,158,653
App. No.
14/959,608
Granted
Dec 18, 2018
Kind
B1
Abstract

A cyber security system that uses artificial intelligence, such neural networks, to monitor the security of a computer network and take automated remedial action based on the monitoring. The security system autonomically learns behavior profiles, attack profiles and circumvention techniques used to target the network. The remedial action taken by the system includes isolating any misuse that has been identified, surveilling the misuse in the isolated environment, analyzing its behavior profile and reconfiguring the network to enhance security.

Claims (36)

1. A computer implemented method for detecting security threats over a network, and for performing cyber-security defense by taking remedial action on detected threats, comprising:

collecting security information data over the network, from a plurality of appliances and application layers;

based on the collected security information data, assessing a risk component of the collected security information and identifying based on pre-determined criteria, one or more security risks from the collected data by performing cognitive cyber-security analytics in an artificial neural network implemented method; and

based on the assessed risk component and the identified one or more security risks, triggering a remedial action;

wherein the assessing is based on a pre-configured library, a periodic surveying, a periodic change managing, and a periodic reconfiguration;

autonomically learning a behavior profile of the plurality of appliances or application layers; and

based on the learned behavior profile, autonomically learning of attack profiles and circumvention techniques used to target the network, the appliances and the application layers.

2. The computer implemented method of claim 1 further comprising in identifying based on pre-determined criteria, one or more security risks from the collected data, at least one of evaluating, simulating and recognizing a usage pattern.

3. The computer implemented method of claim 1 wherein, in identifying based on pre-determined criteria, one or more security risks from the collected data the cognitive cyber-security analytics in the artificial neural network implemented method further comprises autonomic machine learning for recognition of threat patterns, vulnerabilities, anomalous behavior, malicious attack or misuse of network or application assets.

4. The computer implemented method of claim 1 further comprising:

data collection via a data collection layer;

artificial intelligence machine learning based on the collected data and assessment, via an artificial intelligence machine learning layer; and

wherein the assessment further comprises natural language processing, a periodic reconnaissance, and a periodic risk assessment.

5. The computer implemented method of claim 1 further comprising:

analyzing and identifying a risk profile of an appliance or application based on the assessed risk level and the one or more identified security risks;

automatically isolating any misuse that has been identified with the identified security risk profiles and automatically implementing surveillance of the misuse in the isolated environment; and

analyzing the security and behavior profile data collected from the surveillance of the isolated misuse.

6. A computer automated system comprising a non-transitory machine readable medium having encoded instructions and coupled to a hardware processor, wherein the encoded instructions when executed by the hardware processor, cause the computer automated system to:

collect by the hardware processor, security information data over a network, from a plurality of appliances and application layers and store the collected security information data in the non-transitory machine readable medium;

based on the collected security information data, assess a risk component of the collected security information and identify based on pre-determined criteria, one or more security risks from the collected data via a cognitive cyber-security analytics in an artificial neural network implementation; and

based on the assessed risk component and the identified one or more security risks, trigger a remedial action;

wherein the assessing is based on a pre-configured library, a periodic surveying, a periodic change managing, and a periodic reconfiguration;

autonomically learn a behavior profile of the plurality of appliances or application layers; and

based on the learned behavior profile, autonomically learn of attack profiles and circumvention techniques used to target the network, the appliances and the application layers.

7. The system of claim 6 wherein the system is further caused to:

in identifying based on pre-determined criteria, one or more security risks from the collected data, at least one of evaluate, simulate and recognize a usage pattern.

8. The system of claim 6 wherein

the cognitive cyber-security analytics in the artificial neural network implementation further comprises autonomic machine learning for recognition of threat patterns, vulnerabilities, anomalous behavior, malicious attack or misuse of network or application assets.

9. The system of claim 6 wherein the system is further caused to:

collect the data via a data collection layer;

learn, based on the collected data and assessment, via an artificial intelligence machine learning layer; and

wherein the assessment further comprises natural language processing in a natural language processing layer, a periodic reconnaissance, and a periodic risk assessment.

10. The computer automated system of claim 6 , wherein the computer automated system is further caused to:

analyze and identify a risk profile of an appliance or application based on the assessed risk level and the one or more identified security risks;

automatically isolate any misuse that has been identified with the identified security risk profiles and automatically implement surveillance of the misuse in the isolated environment; and

analyze the security and behavior profile data collected from the surveillance of the isolated misuse.

Assignments (6)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 9, 2020
From: NAUTILUS DATA TECHNOLOGIES, INC.
To: NAUTILUS TRUE, LLC
Reel/Frame 054316/0570 →
RELEASE OF SECURITY INTEREST Recorded May 22, 2020
From: SCOTT LAKE HOLDINGS INC., AS AGENT
To: NAUTILUS DATA TECHNOLOGIES, INC.
Reel/Frame 052738/0055 →
RELEASE OF SECURITY INTEREST Recorded Jan 6, 2020
From: SCOTT LAKE TRUST
To: NAUTILUS DATA TECHNOLOGIES, INC.
Reel/Frame 051429/0021 →
SECURITY INTEREST Recorded Jan 6, 2020
From: NAUTILUS DATA TECHNOLOGIES, INC.
To: SCOTT LAKE HOLDINGS INC., AS COLLATERAL AGENT
Reel/Frame 051429/0341 →
SECURITY INTEREST Recorded May 30, 2019
From: NAUTILUS DATA TECHNOLOGIES, INC.
To: SCOTT LAKE TRUST
Reel/Frame 049323/0928 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 4, 2015
From: MAGCALE, ARNOLD; KEKAI, DANIEL
To: NAUTILUS DATA TECHNOLOGIES, INC.
Reel/Frame 037215/0256 →
Cited By (6)
US 12,198,031 US 12,267,299 US 12,401,671 US 12,417,309 US 12,596,960 US 12,645,836