IP Library Granted Patent US 12,387,270
Granted Patent B2
US 12,387,270 · App. 15/660,822 · Granted Aug 12, 2025

Synthetic diversity analysis with actionable feedback methodologies

Inventors: George Y. Ng (San Mateo, CA); Yoshifumi Yamamoto (Palo Alto, CA); Brian Wu (San Francisco, CA); Siddharth R. Ramakrishnan (Pleasanton, CA)
Assignee: Guidewire Software, Inc.
G06Q40/08H04L63/1433H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,387,270
App. No.
15/660,822
Filed
Jul 26, 2017
Granted
Aug 12, 2025
Kind
B2
Art Unit
3692
USPC
705/4
Abstract

Various embodiments disclosed include, for each entity in a portfolio, receiving entity data indicative of attributes of an entity, determining the received entity data for at least some entities is missing a portion of the entity data required to perform a cyber risk analysis; and synthesizing the missing portion. The method may further include comparing the received entity data and synthesized missing portion for each of the entities to each other; locating clusters of similar entity data shared between two or more of the entities; and calculating a cyber risk score representing how different the entities are to one another based on the entity data that are not shared between entities. Some embodiments include comparing entities that are missing some entity data to entities which have complete entity data, and generating a synthesized portfolio by selecting entities having complete entity data to replace the entities that are missing entity data.

Claims (19)

1. A method, comprising:

determining, by a processor, that a portfolio comprising a plurality of entities is missing a portion of entity data for at least some entities in the portfolio, wherein the entity data is indicative of entity attributes;

synthesizing the missing portion of the entity data at least in part by:

determining a ratio of entity types of the plurality of entities in the portfolio at least in part by determining groupings of entities in the portfolio on a percentage basis;

locating one or more substitute entities that have substitute entity data that corresponds to the missing portion of the entity data at least in part by determining, based at least in part on the determined ratio of entity types, portfolios with similar ratios that have complete entity records; and

replacing the missing portion of the entity data with substitute entity data of the one or more located substitute entities;

locating clusters of similar entity data shared between two or more of the plurality of entities at least in part by comparing, by the processor, a combination of the entity data and the synthesized missing portion of the entity data for each of the plurality of entities to each other;

assessing a likelihood of a cyber security failure in a computer network of an entity of the plurality of entities based at least in part on the combination of the entity data and the substitute entity data; and

based at least in part on the assessing of the likelihood of the cyber security failure in the computer network of the entity, determining a set of computer network changes to reduce the likelihood of the cyber security failure in the computer network of the entity, the set of computer network changes comprising at least one of a change in a content delivery network (CDN) provider or a change in a cloud service provider.

2. The method of claim 1 , wherein the synthesizing of the missing portion of entity data comprises:

comparing the plurality of entities of the portfolio that is missing a portion of the entity data to entities with complete entity data; and

generating a synthesized portfolio, the generating comprising:

selecting the entities with complete entity data;

based at least in part on the comparison of the plurality of entities of the portfolio that is missing a portion of the entity data to entities with complete entity data, replacing the plurality of entities that is missing a portion of the entity data with the selected entities with complete entity data; and

wherein the entities with complete entity data are within additional portfolios that are similar in entity composition to the synthesized portfolio.

3. The method of claim 2 , further comprising substituting entity data, from the selected entities having the complete entity data, for the portion of the entity data that is missing, such that a likelihood of a cyber security failure for the synthesized portfolio mimics a likelihood of a cyber security failure of other similar portfolios.

4. The method of claim 2 , further comprising based on the synthesized portfolio, generating another synthesized portfolio and calculating a diversity score.

5. The method of claim 4 , further comprising creating, based at least in part on a set of resynthesized portfolios, a range of diversity scores.

6. The method of claim 1 , further comprising automatically recommending, based on the assessed likelihood of cyber security failure, at least some of the determined set of computer network changes.

Assignments (6)
CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNMENT EXECUTION DATE FROM 10/05/2017 TO 04/01/2018 PREVIOUSLY RECORDED ON REEL 45716 FRAME 282. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded May 23, 2025
From: CYENCE LLC
To: GUIDEWIRE SOFTWARE, INC.
Reel/Frame 071370/0481 →
PATENT SECURITY AGREEMENT Recorded Dec 3, 2024
From: GUIDEWIRE SOFTWARE, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 069476/0488 →
MERGER Recorded May 4, 2018
From: CYENCE INC.
To: CAESAR ACQUISITION SUB II, LLC
Reel/Frame 045716/0257 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 4, 2018
From: CYENCE LLC
To: GUIDEWIRE SOFTWARE, INC.
Reel/Frame 045716/0282 →
CHANGE OF NAME Recorded May 4, 2018
From: CAESAR ACQUISITION SUB II, LLC
To: CYENCE LLC
Reel/Frame 046080/0138 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 5, 2017
From: NG, GEORGE Y.; YAMAMOTO, YOSHIFUMI; WU, BRIAN; RAMAKRISHNAN, SIDDHARTH R.
To: CYENCE INC.
Reel/Frame 043800/0977 →
Continuity (1)
Related Publication 20190035027A1 · Jan 31, 2019
References Cited (222)
US 5243428A · Challapali · 1993 [cited by examiner]
US 5535383A · Gower · 1996 [cited by examiner]
US 5754973A · Akune · 1998 [cited by examiner]
US 5920861A · Hall · 1999 [cited by examiner]
US 5949876A · Ginter · 1999 [cited by examiner]
US 5987440A · O'Neil · 1999 [cited by examiner]
US 6269349B1 · Aieta · 2001 [cited by examiner]
US 6374358B1 · Townsend · 2002 [cited by applicant]
US 6839689B2 · Aieta · 2005 [cited by examiner]
US 6980927B2 · Tracy · 2005 [cited by examiner]
US 7047419B2 · Black · 2006 [cited by examiner]
US 7324952B2 · Hisano · 2008 [cited by applicant]
US 7680659B2 · Gao · 2010 [cited by examiner]
US 7711646B2 · Cianciarulo et al. · 2010 [cited by applicant]
US 8332242B1 · Medina, III · 2012 [cited by applicant]
US 8448245B2 · Banerjee et al. · 2013 [cited by applicant]
US 8468599B2 · McCusker et al. · 2013 [cited by applicant]
US 8484066B2 · Miller · 2013 [cited by examiner]
US 8494955B2 · Quarterman · 2013 [cited by examiner]
US 8577775B1 · Gerber · 2013 [cited by applicant]
US 8601587B1 · Powell · 2013 [cited by examiner]
US 8699767B1 · Khosla et al. · 2014 [cited by applicant]
US 8744894B2 · Christiansen · 2014 [cited by applicant]
US 8973088B1 · Leung et al. · 2015 [cited by applicant]
US 9027125B2 · Kumar · 2015 [cited by examiner]
US 9031951B1 · Baluja et al. · 2015 [cited by applicant]
US 9043905B1 · Allen · 2015 [cited by applicant]
US 9100430B1 · Seiver · 2015 [cited by examiner]
US 9241008B2 · Powell · 2016 [cited by examiner]
US 9253203B1 · Ng · 2016 [cited by applicant]
US 9292881B2 · Alperovitch et al. · 2016 [cited by applicant]
US 9367694B2 · Eck · 2016 [cited by examiner]
US 9373144B1 · Ng et al. · 2016 [cited by applicant]
US 9471777B1 · Juels · 2016 [cited by applicant]
US 9521160B2 · Ng · 2016 [cited by examiner]
US 9613442B2 · Pan · 2017 [cited by examiner]
US 9646428B1 · Konrardy et al. · 2017 [cited by applicant]
US 9699209B2 · Ng et al. · 2017 [cited by applicant]
US 9715711B1 · Konrardy · 2017 [cited by applicant]
US 9893970B2 · Gauvin · 2018 [cited by examiner]
US 9894036B2 · Weinberger · 2018 [cited by applicant]
US 10050989B2 · Ng · 2018 [cited by examiner]
US 10050990B2 · Ng · 2018 [cited by examiner]
US 10099297B2 · Lemmer · 2018 [cited by examiner]
US 10102589B1 · Tofte · 2018 [cited by applicant]
US 10230764B2 · Ng · 2019 [cited by examiner]
US 10326786B2 · Gladstone · 2019 [cited by applicant]
US 10404737B1 · Sweeney · 2019 [cited by examiner]
US 10404748B2 · Parthasarathi · 2019 [cited by examiner]
US 10498757B2 · Pickles · 2019 [cited by examiner]
US 10574539B2 · Brown · 2020 [cited by applicant]
US 10656993B2 · Thatcher · 2020 [cited by examiner]
US 20020026335A1 · Honda · 2002 [cited by applicant]
US 20020091551A1 · Parisi · 2002 [cited by applicant]
US 20030014342A1 · Vande Pol · 2003 [cited by applicant]
US 20030014344A1 · Chacko et al. · 2003 [cited by applicant]
US 20030028803A1 · Bunker · 2003 [cited by examiner]
US 20030040942A1 · Hooten · 2003 [cited by applicant]
US 20030084349A1 · Friedrichs et al. · 2003 [cited by applicant]
US 20030126049A1 · Nagan et al. · 2003 [cited by applicant]
US 20030135758A1 · Turner · 2003 [cited by applicant]
US 20030154393A1 · Young · 2003 [cited by applicant]
US 20030236990A1 · Hrastar et al. · 2003 [cited by applicant]
US 20040006532A1 · Lawrence et al. · 2004 [cited by applicant]
US 20040010709A1 · Baudoin et al. · 2004 [cited by applicant]
US 20040024693A1 · Lawrence · 2004 [cited by applicant]
US 20040049698A1 · Ott et al. · 2004 [cited by applicant]
US 20040064726A1 · Girouard · 2004 [cited by applicant]
US 20040167793A1 · Masuoka · 2004 [cited by examiner]
US 20040260945A1 · Raikar et al. · 2004 [cited by applicant]
US 20050015624A1 · Ginter et al. · 2005 [cited by applicant]
US 20050044418A1 · Miliefsky · 2005 [cited by applicant]
US 20050096944A1 · Ryan · 2005 [cited by examiner]
US 20050097320A1 · Golan · 2005 [cited by examiner]
US 20050131828A1 · Gearhart · 2005 [cited by examiner]
US 20050132225A1 · Gearhart · 2005 [cited by examiner]
US 20050261943A1 · Quarterman et al. · 2005 [cited by applicant]
US 20050278786A1 · Tippett et al. · 2005 [cited by applicant]
US 20060020814A1 · Lieblich · 2006 [cited by applicant]
US 20060062443A1 · Basu · 2006 [cited by examiner]
US 20060184473A1 · Eder · 2006 [cited by applicant]
US 20060265746A1 · Farley et al. · 2006 [cited by applicant]
US 20070005680A1 · Jrad · 2007 [cited by applicant]
US 20070180490A1 · Renzi · 2007 [cited by applicant]
US 20070192867A1 · Miliefsky · 2007 [cited by applicant]
US 20070294118A1 · Tait et al. · 2007 [cited by applicant]
US 20070298720A1 · Wolman · 2007 [cited by applicant]
US 20080016563A1 · McConnell et al. · 2008 [cited by applicant]
US 20080047016A1 · Spoonamore · 2008 [cited by applicant]
US 20080162377A1 · Pinkas · 2008 [cited by applicant]
US 20080167920A1 · Schmidt et al. · 2008 [cited by applicant]
US 20080250064A1 · Duchon et al. · 2008 [cited by applicant]
US 20080280637A1 · Shaffer · 2008 [cited by applicant]
US 20090024663A1 · McGovern · 2009 [cited by applicant]
US 20090037323A1 · Feinstein · 2009 [cited by applicant]
US 20090063365A1 · Pinkas · 2009 [cited by applicant]
US 20090126018A1 · Keohane · 2009 [cited by applicant]
US 20090271863A1 · Govindavajhala · 2009 [cited by applicant]
US 20090319342A1 · Shilman et al. · 2009 [cited by applicant]
US 20100046553A1 · Daigle · 2010 [cited by applicant]
US 20100114634A1 · Christiansen et al. · 2010 [cited by applicant]
US 20100153156A1 · Guinta · 2010 [cited by applicant]
US 20100205014A1 · Sholer · 2010 [cited by examiner]
US 20100229187A1 · Marwah et al. · 2010 [cited by applicant]
US 20110036909A1 · Berkun · 2011 [cited by examiner]
US 20110078073A1 · Annappindi · 2011 [cited by applicant]
US 20110154497A1 · Bailey, Jr. · 2011 [cited by applicant]
US 20110161116A1 · Peak · 2011 [cited by examiner]
US 20110239267A1 · Lyne · 2011 [cited by applicant]
US 20110244798A1 · Daigle · 2011 [cited by applicant]
US 20110277034A1 · Hanson · 2011 [cited by examiner]
US 20110289597A1 · Hinds · 2011 [cited by applicant]
US 20110295722A1 · Reisman · 2011 [cited by applicant]
US 20110313930A1 · Bailey, Jr. · 2011 [cited by applicant]
US 20120011077A1 · Bhagat · 2012 [cited by applicant]
US 20120041790A1 · Koziol · 2012 [cited by applicant]
US 20120046989A1 · Baikalov et al. · 2012 [cited by applicant]
US 20120059779A1 · Syed et al. · 2012 [cited by applicant]
US 20120079598A1 · Brock · 2012 [cited by applicant]
US 20120089617A1 · Frey · 2012 [cited by applicant]
US 20120096558A1 · Evrard · 2012 [cited by applicant]
US 20120159624A1 · König · 2012 [cited by applicant]
US 20120215575A1 · Deb et al. · 2012 [cited by applicant]
US 20120239438A1 · Hemmings · 2012 [cited by applicant]
US 20120284158A1 · Kovac · 2012 [cited by applicant]
US 20120300975A1 · Chalamala et al. · 2012 [cited by applicant]
US 20130055404A1 · Khalili · 2013 [cited by applicant]
US 20130073473A1 · Heath · 2013 [cited by applicant]
US 20130104236A1 · Ray · 2013 [cited by applicant]
US 20130188475A1 · Lim et al. · 2013 [cited by applicant]
US 20130191829A1 · Shimokawa et al. · 2013 [cited by applicant]
US 20130218670A1 · Spears · 2013 [cited by examiner]
US 20130239167A1 · Sreenivas et al. · 2013 [cited by applicant]
US 20130239168A1 · Sreenivas et al. · 2013 [cited by applicant]
US 20130239177A1 · Sigurdson et al. · 2013 [cited by applicant]
US 20130283336A1 · Macy et al. · 2013 [cited by applicant]
US 20130346328A1 · Agle et al. · 2013 [cited by applicant]
US 20130347060A1 · Hazzani · 2013 [cited by applicant]
US 20140007190A1 · Alperovitch et al. · 2014 [cited by applicant]
US 20140019171A1 · Koziol · 2014 [cited by applicant]
US 20140067713A1 · Gerber · 2014 [cited by applicant]
US 20140067716A1 · Gerber · 2014 [cited by applicant]
US 20140122163A1 · Simpson · 2014 [cited by applicant]
US 20140137257A1 · Martinez · 2014 [cited by examiner]
US 20140142988A1 · Grosso et al. · 2014 [cited by applicant]
US 20140181982A1 · Guo · 2014 [cited by applicant]
US 20140200930A1 · Zizzamia et al. · 2014 [cited by applicant]
US 20140215621A1 · Xaypanya · 2014 [cited by applicant]
US 20140257917A1 · Spencer · 2014 [cited by applicant]
US 20140257918A1 · Spencer · 2014 [cited by applicant]
US 20140328179A1 · Kabakura · 2014 [cited by applicant]
US 20140379708A1 · Fox · 2014 [cited by applicant]
US 20150088595A1 · Chillar et al. · 2015 [cited by applicant]
US 20150095206A1 · Van Heerden · 2015 [cited by examiner]
US 20150100442A1 · Van Heerden · 2015 [cited by examiner]
US 20150100443A1 · Van Heerden · 2015 [cited by examiner]
US 20150106260A1 · Andrews · 2015 [cited by applicant]
US 20150188949A1 · Mahaffey · 2015 [cited by examiner]
US 20150269383A1 · Lang · 2015 [cited by applicant]
US 20150271142A1 · Oliphant · 2015 [cited by applicant]
US 20150324559A1 · Boss · 2015 [cited by applicant]
US 20150331932A1 · Georges · 2015 [cited by examiner]
US 20150341389A1 · Kurakami · 2015 [cited by applicant]
US 20150373043A1 · Wang et al. · 2015 [cited by applicant]
US 20150379488A1 · Ruff · 2015 [cited by applicant]
US 20150381662A1 · Nair · 2015 [cited by applicant]
US 20160099963A1 · Mahaffey · 2016 [cited by applicant]
US 20160148332A1 · Stibel · 2016 [cited by applicant]
US 20160155066A1 · Drame · 2016 [cited by examiner]
US 20160162924A1 · Rathod · 2016 [cited by applicant]
US 20160189301A1 · Ng et al. · 2016 [cited by applicant]
US 20160197953A1 · King-Wilson · 2016 [cited by applicant]
US 20160205138A1 · Krishnaprasad · 2016 [cited by applicant]
US 20160212169A1 · Knjazihhin et al. · 2016 [cited by applicant]
US 20160234247A1 · Ng et al. · 2016 [cited by applicant]
US 20160248799A1 · Ng et al. · 2016 [cited by applicant]
US 20160248800A1 · Ng et al. · 2016 [cited by applicant]
US 20160294854A1 · Parthasarathi et al. · 2016 [cited by applicant]
US 20160306979A1 · Kotler · 2016 [cited by applicant]
US 20170085595A1 · Ng et al. · 2017 [cited by applicant]
US 20170093904A1 · Ng et al. · 2017 [cited by applicant]
US 20170093905A1 · Ng · 2017 [cited by examiner]
US 20170116552A1 · Deodhar et al. · 2017 [cited by applicant]
US 20170142140A1 · Muddu · 2017 [cited by examiner]
US 20170187745A1 · Ng et al. · 2017 [cited by applicant]
US 20180025157A1 · Titonis · 2018 [cited by examiner]
US 20180359276A1 · Ng · 2018 [cited by examiner]
US 20190035027A1 · Ng · 2019 [cited by examiner]
US 20210358046A1 · Roll · 2021 [cited by applicant]
US 20220245727A1 · Roll · 2022 [cited by applicant]
EP 3675455A1 · 2020 [cited by examiner]
JP 2006295910A · 2006 [cited by examiner]
TW 201636937A · 2016 [cited by applicant]
WO WO2014036396A1 · 2014 [cited by applicant]
WO WO2016109162A1 · 2016 [cited by applicant]
WO WO2016109608A1 · 2016 [cited by applicant]
WO WO2017078986A1 · 2017 [cited by applicant]
Santos et. al, “Method of Automated Cyber risk assessment insurance underwriting and remediation” Cisco systems (2017) (Year: 2017). [cited by examiner]
Martin Salois, “Password Complexity Recommendations”, Defense Research and Development Canada, Oct. 2014, pp. 1-34. [cited by applicant]
Scarfone et al. NIST Special Publication 800-118. “Guide to Enterprise Password Management (Draft)”, Apr. 2009, NIST (National Institute of Standards and Technology), pp. 1-40. [cited by applicant]
U.S. Appl. No. 14/614,897, filed Feb. 5, 2015. [cited by applicant]
“International Search Report” & “Written Opinion,” Patent Cooperation Treaty Application No. PCT/US2015/065365, Feb. 10, 2016, 11 pages. [cited by applicant]
Böhme et al., “Models and Measures for Correlation in Cyber-Insurance,” Workshop on the Economics of Information Security (WEIS), Jun. 2006, Retrieved from the Internet: <URL:http://www.econinfosec.org/archive/weis2006/… [cited by applicant]
“International Search Report” & “Written Opinion,” Patent Cooperation Treaty Application No. PCT/US2015/067968, Feb. 26, 2016, 11 pages. [cited by applicant]
Raftery, Adrian et al., “Variable Selection for Model-Based Clustering,” Journal of the American Statistical Association, Mar. 2006, pp. 168-178, http://www.stat.washington.edu/raftery/Research/PDF/dean2006.pdf, pp. 168… [cited by applicant]
“International Search Report” and “Written Opinion of the International Searching Authority,” Patent Cooperation Treaty Application No. PCT/US2016/058711, Dec. 8, 2016, 9 pages. [cited by applicant]
Mathew et al., “Intruders and Password Management,” International Journal of Science Technology & Engineering, Oct. 2015, pp. 312-315. [cited by applicant]
Non-Final Office Action, Apr. 1, 2015, U.S. Appl. No. 14/585,051, filed Dec. 29, 2014. [cited by applicant]
Non-Final Office Action, Apr. 20, 2015, U.S. Appl. No. 14/614,897, filed Feb. 5, 2015. [cited by applicant]
Notice of Allowance, Sep. 25, 2015, U.S. Appl. No. 14/585,051, filed Dec. 29, 2014. [cited by applicant]
Final Office Action, Oct. 16, 2015, U.S. Appl. No. 14/614,897, filed Feb. 5, 2015. [cited by applicant]
Notice of Allowance, Mar. 15, 2016, U.S. Appl. No. 14/931,510, filed Nov. 3, 2015. [cited by applicant]
Notice of Allowance, Jul. 29, 2016, U.S. Appl. No. 15/141,779, filed Apr. 28, 2016. [cited by applicant]
Non-Final Office Action, Jul. 29, 2016, U.S. Appl. No. 15/142,997, filed Apr. 29, 2016. [cited by applicant]
Non-Final Office Action, Sep. 7, 2016, U.S. Appl. No. 15/099,297, filed Apr. 14, 2016. [cited by applicant]
Notice of Allowance, Jan. 3, 2017, U.S. Appl. No. 15/142,997, filed Apr. 29, 2016. [cited by applicant]
Final Office Action, Mar. 14, 2017, U.S. Appl. No. 15/099,297, filed Apr. 14, 2016. [cited by applicant]
Non-Final Office Action, May 23, 2017, U.S. Appl. No. 15/457,921, filed Mar. 13, 2017. [cited by applicant]
Non-Final Office Action, Aug. 23, 2017, U.S. Appl. No. 15/371,047, filed Dec. 6, 2016. [cited by applicant]
Notice of Allowance, Aug. 24, 2017, U.S. Appl. No. 15/099,297, filed Apr. 14, 2016. [cited by applicant]
Non-Final Office Action, Sep. 7, 2017, U.S. Appl. No. 15/374,212, filed Dec. 9, 2016. [cited by applicant]
Non-Final Office Action, Sep. 7, 2017, U.S. Appl. No. 15/373,298, filed Dec. 8, 2016. [cited by applicant]