21 results about "Enterprise networking" patented technology

In one example, a non-transitory computer-readable storage medium stores executable program instructions that detect, at a remote device node, vulnerability data associated with an exploitable vulnerability of a target enterprise network; retrieve, by a first local device node, the vulnerability data, which may include a CVSS score, determine, by a second local device node, a vulnerability score VT by determining a first subscore VT1, where the first subscore VT1 is based on a Maximized Confidentiality Impact (MCI) metric that is a modified privacy metric to capture the privacy impact of the exploitable vulnerability, where the first subscore VT1 is also based on a Maximized Highest Impact (MHI) metric to capture reputation damage based on an outsized single impact attribute, and on a Modified Confidentiality (MC) metric, Modified Integrity (MI) metric and Modified Availability (MA) as provided by CVSS; and remediate the exploitable vulnerability based on the vulnerability score VT.

The application discloses an enterprise event intelligent processing system and method based on artificial intelligence, relates to the technical field of enterprise event data analysis, and specifically comprises the following steps: constructing an enterprise event abnormality judgment system; acquiring characteristic data of enterprise events in history; establishing an event characteristic sequence; taking the event characteristic sequence of an enterprise event as a benchmark, extracting an influence factor causing network characteristic fluctuation, obtaining a correlation pair of the influence factor and the enterprise event; analyzing the correlation pair, extracting the influence factor, and dynamically calculating an influence coefficient of the influence factor; calculating an abnormal risk value of the enterprise event, comparing with a preset network fluctuation threshold value when the enterprise event occurs, and performing early warning. The method can effectively improve the identification efficiency and response capability of enterprises on abnormal events, significantly enhances the foresight, initiative and decision scientificity of enterprise network security protection, and has good practical value and popularization prospect.

Systems and methods include intercepting traffic at a mobile device via a connector application executing on the mobile device, the traffic originating from one or more applications on the mobile device and destined for one or more resources located in one of a public cloud, a private cloud, and an enterprise network; detecting one or more Virtual Private Network (VPN) profiles associated with the traffic, wherein the one or more VPN profiles are assigned to the traffic by the operating system of the mobile device; and forwarding the traffic to a cloud-based system via one or more tunnels based on the one or more VPN profiles detected in the traffic.

An apparatus, method or non-transitory computer readable storage medium having software stored thereon can be configured to allocate a primary channel and a secondary channel to a Citizens Broadband radio Service Device, wherein a call is placed on the primary channel, monitor the primary and secondary channels to detect arrival of an incumbent, determine whether the incumbent has been detected, and upon detection of the incumbent, hand off the call to the secondary channel.

Various examples are provided related to identification of protected information elements associated with unique entities in data files present in data file collections associated with enterprise IT networks. The unique entities can be associated with one or more entity identifications in one or more data files. Computer-generated identification of entity identifications and protected information elements can be conducted, in part, by at least some human review. Information generated accordingly to the disclosed methodology can be used to generate plans for a time and number of human reviewers needed to review data files. Information generated from the processes herein can be configured as user notifications, reports, dashboards, machine learning for subsequent data file analyses, and notifications of unique entities having protected information elements present in one or more data files.

Systems and methods for remote monitoring of a Security Operations Center (SOC) via a mobile application are provided. According to one embodiment, a management service retrieves information regarding multiple network elements that are associated with an enterprise network and extracts parameters of the monitored network elements from the retrieved information. The management service prioritizes the monitored network elements by determining a severity level associated with security-related issues of the network elements and generates various monitoring views that summarize in real time various categories of potential security-related issues detected by the SOC. Further, the management service assigns a priority to each monitoring view and displays a video on the display device that cycles through monitoring views in accordance with their respective assigned priorities.

Systems and methods are provided for automatically supporting clients in a help desk framework. In one implementation, a method includes a step of monitoring an enterprise network. In response to detecting one or more adverse conditions of the enterprise network that imply a decline in one or more User Experience (UX) metrics, the method further includes a step of automatically collecting data logs from the enterprise network. Also, the method includes automatically analyzing the data logs. In response to determining that the data logs indicate one or more issues in the enterprise network, the method further includes a step of suggesting actions to remediate the one or more issues.

The application relates to the technical field of network security, and discloses a server monitoring system and method based on network security, which comprises a security data acquisition module, a data processing and analysis module, an asset security management module, a threat detection and response module, a situation awareness and visualization module and a system management module; server running state data is acquired through multi-source heterogeneous data acquisition technology; security analysis is carried out through normalization processing and machine learning algorithms; a server asset full life cycle management system is established; threat detection and automatic response are realized based on rule detection and behavior analysis technology; and the security situation is displayed through a visual interface and a compliance report is generated. The application reduces the false alarm rate of security events and the work load of security operation and maintenance, and improves the timeliness of server security protection and the level of enterprise network security protection.

This application provides a network management-based terminal control configuration method and system for linking the network management end and the device end to create a high-efficiency, stable, highly compatible, easy-to-configure, highly scalable, non-dependent, and low-deployment-cost precise WIFI access control solution. Compared with existing network management solutions based on whitelists, access control, and internet behavior management, it can better meet the security management needs of enterprises for precise terminal access to WIFI in their network security work.

Implementation(s) for acquiring new certificates on behalf of managed endpoints. For example, new certificates are acquired by: identifying a managed endpoint associated with a current certificate and corresponding current private key to be renewed; sending a first one or more messages to the managed endpoint to cause the managed endpoint to generate information needed to acquire a new certificate; providing the information to a certificate authority (CA) and receiving a corresponding new certificate from the CA on behalf of the managed endpoint; and sending one or more messages to the managed endpoint to replace the current certificate and current private key with the new certificate and a new private key, respectively.

The application provides a third-party linkage threat intelligence blocking strategy issuing method and device and processing equipment, which can comprehensively and timely acquire various threat intelligence by constructing a multi-source threat intelligence collection channel, and can quickly and accurately identify potential threats by using machine learning and artificial intelligence algorithms for intelligent analysis, and can realize real-time blocking of threats by automatically generating a blocking strategy and executing the blocking strategy in linkage with network security equipment, so that a more perfect network threat intelligence application system is provided for enterprise network security work, and network security is better guaranteed.

A contactless optical device is useable to identify a user, and allows an enterprise to authorize access by that user to enterprise facilities and / or cause presentation of user information of the user. The device is specifically adapted for secure usage within an enterprise network via a wired network interface. The device avoids storage of user-identifying data in persistent memory, to avoid compromise of user data if the device were lost or stolen, or otherwise removed from the enterprise network.

A system and method for continuously improving the cybersecurity rating of a firm includes a feed processor configured to parse at least one cybersecurity report and to feed for building an instance graph. The system may identify, measure, and monitor portfolio dimensions of public-facing digital artifacts. In addition, the system and method may each include the instance graph being compared by a correlation engine with a reference graph to generate automated or semi-automated remediation recommendations that may lead to continuous improvement of a cybersecurity rating for an organization or firm.

Data sets are analyzed with EDA for determining feasible data for training. Monitoring of stations can be passive by snooping data packets, and can be active by direct communication with an operating system. A conference application currently running on a specific station is detected from data packets associated with the specific station. A set of channel experiences and a set of conference application experiences are predicted using the experience prediction model. A sliding window can define a time period for predictions and weighting can define relativity between different inputs. The experience prediction module has been trained with validated channel statistics collected at network sensors dispersed at different locations on the enterprise network.

This invention discloses a web crawler detection system based on application scenarios, including a crawler detection platform. The crawler detection platform comprises a user analysis unit, a human-machine recognition unit, a secondary verification unit, a space development unit, and a reality integration unit. This invention relates to the field of web crawler detection technology. This application scenario-based web crawler detection system divides the enterprise network into different application scenarios according to their uses. Based on these application scenarios, it performs triple malicious crawler identification, achieving a more comprehensive screening of malicious crawlers. Simultaneously, it provides registered users with personal spaces, offering convenience and effectively avoiding false positives on genuine users, thus improving user experience. Furthermore, by combining network information related to the application scenarios to manage personal spaces, it greatly enhances the flexibility of malicious crawler detection while effectively locating abnormal parts of the enterprise network, providing powerful assistance for the operation and management of the enterprise network.

The present application relates to a kind of jurisdiction enterprise network security management and control method, system and computer readable storage medium, the multi-source heterogeneous network security data of each enterprise in jurisdiction is collected, and the enterprise correlation graph is constructed;Using graph neural network constructs and learns enterprise correlation graph, obtains the graph embedding vector of each enterprise;In the attention calculation of graph neural network, the real-time risk score of neighbor enterprise is as input;Using large language model, the semantic analysis of unstructured text data is carried out, the implicit correlation between enterprises and potential risk semantics are mined, and the enterprise correlation graph is updated based on implicit correlation and potential risk semantics;Based on the updated enterprise correlation graph, graph embedding vector and real-time security data, the dynamic risk score of each enterprise is calculated using fusion risk score model;Based on dynamic risk score, risk trend is predicted, and using explainable technology, early warning information containing risk cause explanation is generated.The present application significantly improves the network security protection capability of jurisdiction.

Profile-based association method for enterprise networks may be provided. A computing device may configure a first profile and a second profile. Next, the client device may be configured with a set of network profiles associated with a plurality of networks. A user of the client device may be queried for a profile choice for one of the plurality of networks. Then the client device may associate with the one of the plurality of networks according to the profile choice provide by the user.

This invention discloses a network and information security defense method and system based on multi-dimensional threat perception, relating to the field of network and information security technology. This invention obtains mirrored traffic data from key network nodes, separates transport layer security protocol handshake messages and application data messages, extracts unencrypted handshake metadata from client and server greeting messages using a first perception channel, generates a multi-dimensional static fingerprint vector, extracts the application layer payload length sequence using a second perception channel, calculates the packet length state transition probability distribution as a dynamic behavior feature vector, and jointly encodes the static fingerprint vector and dynamic behavior feature vector, inputting it into a shallow graph convolutional network to output a malicious confidence score. When the score exceeds a threshold, session-level blocking is executed. This achieves high-precision detection of encrypted malicious traffic without decrypting the traffic, and is suitable for encrypted traffic security protection scenarios at enterprise network boundaries, cloud data centers, and critical information infrastructure.

A method is described that involves a method for application performance in a cross-domain network using multi-controller coordination. The method includes receiving a request at a first controller from an application within an enterprise network, wherein the request seeks to monitor a network path. The first controller identifies one or more additional controllers within the enterprise network capable of monitoring the network path. These additional controllers include a first one within the same domain as the first controller (first domain) and a second one within a different domain (second domain). A token, encompassing authentication details and monitoring requirements linked to the request, is sent to the second additional controller from the first domain. Subsequently, direct communication is established with a resource of the second controller, allowing monitoring of the request and its associated operation.