Improved tools and techniques for generating stateful rules for behavior-based threat detection enable threat analysts, who do not have advanced computer programming skills, to quickly and easily generate high-level representations of stateful behavioral rules, which are then compiled into a format suitable for execution by a stateful rule processing engine. In some examples, the high-level representations of stateful rules are coded in a high-level, domain specific language (DSL). The DSL may provide high-level primitives suitable for (1) expressing sequences of attack behaviors, (2) tagging computational entities (e.g., threads, processes, applications, systems, users, etc.) with states (e.g., user-defined states), and/or (3) performing operations on endpoint nodes (e.g., reporting activity, blocking activity, terminating processes, etc.).


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    STATEFUL RULE GENERATION FOR BEHAVIOR BASED THREAT DETECTION


    Beteiligte:
    DRAPEAU PAUL M (Autor:in) / GWINNUP KYLE P (Autor:in)

    Erscheinungsdatum :

    2022-11-24


    Medientyp :

    Patent


    Format :

    Elektronische Ressource


    Sprache :

    Englisch


    Klassifikation :

    IPC:    B60W CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION , Gemeinsame Steuerung oder Regelung von Fahrzeug-Unteraggregaten verschiedenen Typs oder verschiedener Funktion / G06K Erkennen von Daten , RECOGNITION OF DATA



    Stateful rule generation for behavior based threat detection

    DRAPEAU PAUL M / GWINNUP KYLE P | Europäisches Patentamt | 2024

    Freier Zugriff

    Behavior Trees with Stateful Tasks

    Klöckner, Andreas | Springer Verlag | 2015



    A High-Speed Stateful Packet Processing Approach for Tbps Programmable Switches

    Mariano Scazzariello / Tommaso Caiazzi / Hamid Ghasemirahni et al. | BASE | 2023

    Freier Zugriff

    Transportation threat detection system

    WICKRAMARATHNE THANUKA / BAUER PETER | Europäisches Patentamt | 2021

    Freier Zugriff