11 results about "Security administrator" patented technology

An industrial security system leverages generative artificial intelligence (AI) to automate the process of identifying software or hardware insecurities on industrial assets, generate recommendations for mitigating these vulnerabilities, and, where appropriate, deploy countermeasures to the vulnerable assets. By leveraging automated asset discovery, real-time asset and network monitoring, and generative AI-assisted vulnerability detection and remediation, the system can reduce the amount of time spent by security administrators in identifying and closing security vulnerabilities within their plant environments, and can alert administrators of potential security issues before those issues become critical.

Methods, systems, and computer storage media for providing brand-focused security administration in an item listing system are described. Using a brand-focused machine learning model, the brand-focused security administrator engine supports generating different comprehensive reports and analytics on brand-related security metrics, including brand compliance rates, infringement incidents, enforcement actions taken, and overall item listing system integrity. The brand-focused security administrator engine also supports visualizing the brand-focused security analytics results data in a manner that enhances usability and decision-making by presenting complex brand-focused security analytics results data in a clear, actionable format. In operation, brand-focused security data is accessed. The brand-focused security data is analyzed using a brand-focused machine learning model that is trained based on a multi-dimensional authenticity analysis dataset. Brand-focused security analytics results data is generated. The brand-focused security analytics results data is communicated to cause display of one or more visualizations based on the brand-focused security analytics results data.

An industrial security system leverages generative artificial intelligence (AI) to automate the process of identifying software or hardware insecurities on industrial assets, generate recommendations for mitigating these vulnerabilities, and, where appropriate, deploy countermeasures to the vulnerable assets. By leveraging automated asset discovery, real-time asset and network monitoring, and generative AI-assisted vulnerability detection and remediation, the system can reduce the amount of time spent by security administrators in identifying and closing security vulnerabilities within their plant environments, and can alert administrators of potential security issues before those issues become critical.

This disclosure describes techniques for orchestrating implementation of a security solution among network devices. The techniques include determining capabilities of routers of the network and capabilities of a cloud security service to perform security features of a security solution. Based at least in part on the capabilities, the techniques include configuring a router of the network to execute a first subset of the security features on data traffic of the network, and configuring the cloud security service to execute a second subset of the security features on the data traffic. The techniques may also include causing the security solution to be presented to a security administrator via a display, the display providing representations of the first subset and the second subset of the security features.

In a computer network monitored for security threats, security incidents corresponding to groups of mutually related security alerts may be ranked based on values of a diversity metric computed for each incident from attribute values of an attribute, or multiple attributes, associated with the security alerts. In some embodiments, values of attribute-specific sub-metrics are determined for each incident and combined, e.g., upon conversion to p-values, into respective values of the overall diversity metric. Based on the ranking, an output may be generated. For example, a ranked list of the security incidents (or a subset thereof) may be communicated to a security administrator, and / or may trigger an automated mitigating action.

Systems and methods for providing an identity power scoring system for cloud environments. Various embodiments include collecting entitlement information associated with a user of a cloud environment; deriving a global power score of the identity, the global power score being based on the identity's entitlements in the cloud environment; and providing the global power score to security administrators of the cloud environment by way of a Graphical User Interface (GUI).

The invention relates to the technical field of information security privacy protection, in particular to an automatic identification and desensitization system, in the system, a log acquisition module is configured to acquire original log data of an application system in real time or according to a preset time interval, a sensitive information identification engine is used for deeply analyzing the original log data, and the sensitive information identification engine is used for identifying sensitive information; the desensitization strategy management center is responsible for storing, classifying, updating and dynamically providing global and local desensitization strategies, and the system monitoring and log auditing module is used for monitoring the running state, the performance index and the desensitization effect of the system. And the strategy configuration and update interface allows an external system, a security administrator or an automatic tool to dynamically update the desensitization strategy and the verification rule in the desensitization strategy management center through a graphical interface or an API (Application Program Interface). According to the system, the invasiveness can be reduced, high-precision sensitive information identification is realized, the system is flexible and configurable, fine-grained desensitization processing can be realized, comprehensive monitoring and auditing can be realized, and the reusability and expandability of the system are improved.

The invention provides a confidential application system and non-confidential application system data docking method based on a high configurable component, which can meet the requirements of three-member decentration, data transmission security, access control and whole process traceability (security audit) of data docking of a confidential application system and a non-confidential application system in a confidential network environment. The data interface development efficiency, flexibility, expansibility, safety and reliability are improved, and the method comprises the following steps that firstly, a data docking unified service configuration assembly is built; 2, a system administrator of the secret-related application system configures data docking technical parameters; 3, configuring a data docking security policy by a security administrator of the secret-related application system; 4, defining a data extraction service and a data pushing service by a system administrator of the secret-related application system; 5, a system administrator of the secret-related application system newly builds data extraction and data push service test cases and tests the test cases one by one; sixthly, the confidential application system and the non-confidential application system call data extraction and pushing services respectively; 7, carrying out sensitive information cleaning conversion on the data from the secret-related application system; 8, data encryption transmission; 9, receiving the data and carrying out decryption and integrity verification; 10, checking the butt joint data; and 11, auditing the operation of the system administrator in the steps 2, 4 and 5 and the operation log of the security administrator in the step 3 by the security auditor of the secret-related application system.

Embodiments monitor security environments. An assessment of events may be used to generate event data that includes findings associated with events. The event data may be employed to: determine users associated with an event based on a discovery agent provided a discovery prompt; determine findings that may be eligible for an interview based on a subject agent provided a subject prompt; employ the subject agent to generate questions based on the eligible findings such that each question requests additional information associated with the eligible findings; collecting the additional information for the eligible findings based on a questioner agent provided a questioner prompt to perform an interview. An updated assessment may be employed to display a report for security administrators.

Methods, systems, and computer storage media for providing brand oriented security management in an item listing system are described. By using a brand-oriented machine learning model, a brand-oriented security administrator engine supports the generation of different integrated reports and analyses of brand-related security metrics, including brand compliance, infringement events, law enforcement actions taken, and overall item list system integrity. The brand-oriented security administrator engine also supports visualization of brand-oriented security analysis result data in a manner that enhances availability and decision making by presenting complex brand-oriented security analysis result data in a clear, operable format. In operation, brand oriented security data is accessed. Brand-oriented security data is analyzed using a brand-oriented machine learning model trained based on a multi-dimensional authenticity analysis dataset. And generating brand-oriented security analysis result data. The brand-oriented security analysis result data is transmitted such that one or more visualizations are displayed based on the brand-oriented security analysis result data.

Embodiments monitor security environments. An assessment of events may be used to generate event data that includes findings associated with events. The event data may be employed to: determine users associated with an event based on a discovery agent provided a discovery prompt; determine findings that may be eligible for an interview based on a subject agent provided a subject prompt; employ the subject agent to generate questions based on the eligible findings such that each question requests additional information associated with the eligible findings; collecting the additional information for the eligible findings based on a questioner agent provided a questioner prompt to perform an interview. An updated assessment may be employed to display a report for security administrators.