Granted Patent B2

US 11,374,956 · App. 15/998,930 · Granted Jun 28, 2022

Inventors: James Foster (Baltimore, MD); Christopher B. Cullison (Westminster, MD); Michael Price (Baltimore, MD); Zachary Michael Allen (Odenton, MD)

Assignee: ZeroFOX, Inc

H04L63/1433G06N20/00H04L63/1416H04L63/1425H04L63/1441H04L63/20H04W4/21H04W12/122G06Q50/01

Abstract

Claims (48)

1. A computer-implemented method comprising:

scanning, by one or more processors, data that is maintained on one or more social networks;

identifying, one or more social entities associated with the scanned data;

determining a risk score for each of the one or more social entities;

analyzing the scanned data using one or more machine learning techniques;

assigning a rating to each of the one or more social entities based on the determined risk score and the analyzed data;

determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk likely to share data that is harmful to at least one protected social entity; and

submitting a request to a particular social network to delete at least one of a third-party account associated with the at least one social entity or a post on the third-party account associated with the at least one social entity.

2. The method of claim 1 , wherein determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk comprises, determining that the at least one social entity is interacting with an automated account.

3. The method of claim 1 , wherein determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk comprises, determining that the at least one social entity is a participant in an automated campaign to distribute security risks.

4. A method of claim 1 further comprising:

generating an alert notification; and

providing the generated alert to a user through a social network security portal.

5. A system comprising:

one or more processing devices; and

one or more non-transitory computer-readable media coupled to the one or more processing devices having instructions stored thereon which, when executed by the one or more processing devices, cause the one or more processing devices to perform operations comprising:

scanning, by one or more processors, data that is maintained on one or more social networks;

identifying, one or more social entities associated with the scanned data;

determining a risk score for each of the one or more social entities;

analyzing the scanned data using one or more machine learning techniques;

assigning a rating to each of the one or more social entities based on the determined risk score and the analyzed data;

determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk likely to share data that is harmful to at least one protected social entity; and

submitting a request to a particular social network to delete at least one of a third-party account associated with the at least one social entity or a post on the third-party account associated with the at least one social entity.

6. The system of claim 5 , wherein determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk comprises, determining that the at least one social entity is interacting with an automated account.

7. The system of claim 5 , wherein determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk comprises, determining that the at least one social entity is a participant in an automated campaign to distribute security risks.

8. A system of claim 5 further comprising:

generating an alert notification; and

providing the generated alert to a user through a social network security portal.

9. A non-transitory computer-readable storage medium encoded with a computer program, the program comprising instructions that when executed by a data processing apparatus cause the data processing apparatus to perform operations comprising:

scanning, by one or more processors, data that is maintained on one or more social networks;

identifying, one or more social entities associated with the scanned data;

determining a risk score for each of the one or more social entities, wherein determining the risk score comprises:

calculating a first risk score based on the scanned data for a social entity;

calculating a first confidence score for the first risk score;

in response to determining that the first confidence score is not below a predefined threshold,

determining that the first risk score is the risk score;

in response to determining that the first confidence score is below a predefined threshold, scanning additional data for the social entity;

calculating a second risk score based on the additional scanned data; calculating a second confidence score for the second risk score; and

determining that the second risk score is the risk score;

analyzing the scanned data using one or more machine learning techniques;

assigning a rating to each of the one or more social entities based on the determined risk score and the analyzed data;

determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk likely to share data that is harmful to at least one protected social entity; and

submitting a request to a particular social network to delete at least one of a third-party account associated with the at least one social entity or a post on the third-party account associated with the at least one social entity.

10. The medium of claim 9 , wherein determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk comprises, determining that the at least one social entity is interacting with an automated account.

11. The medium of claim 9 , wherein determining, based on the rating assigned to at least one of the one or more social entities that the at least one social entity is a security risk comprises, determining that the at least one social entity is a participant in an automated campaign to distribute security risks.

12. A medium of claim 9 further comprising:

generating an alert notification; and

providing the generated alert to a user through a social network security portal.

Assignments (10)

Continuity (2)