David M Mcmillen

US Patent:

20160308899, Oct 20, 2016

Filed:

Jun 24, 2016

Appl. No.:

15/192437

Inventors:

- Armonk NY, US
Gary I. Givental - Royal Oak MI, US
David M. McMillen - Tuxedo Park NY, US
Kaleb D. Walton - Fenton MI, US

International Classification:

H04L 29/06

Abstract:

An approach is provided for determining a likelihood of an attack on a first computer system of a first business. Characteristics are determined for target businesses having target computer systems currently or recently under attack by an entity whose Internet Protocol (IP) address was selected from a list of suspicious IP addresses. Percentages associated with the characteristics are determined. Each percentage indicates a percentage of the target businesses whose associated characteristic matches a corresponding characteristic of the first business. A score is incremented by an amount for each of the percentages that exceeds an associated threshold. The score is incremented by twice the amount if the IP address matches an address of a source or destination of traffic through a security device in the first computer system. A recommendation to change a security policy for the first computer system is generated if the score exceeds twice the predetermined amount.

US Patent:

20160065621, Mar 3, 2016

Filed:

Nov 6, 2015

Appl. No.:

14/934841

Inventors:

- Armonk NY, US
Gary I. Givental - Royal Oak MI, US
David M. McMillen - Tuxedo Park NY, US
Kaleb D. Walton - Fenton MI, US

International Classification:

H04L 29/06

Abstract:

An approach is provided for determining a likelihood of an attack on a first computer system of a first business. Characteristics of the first business and a second business are determined. The second business has a second computer system currently or recently under attack. The characteristics include respective industries, sizes, geographical locations, types of sensitive data, and security vulnerabilities associated with the first and second businesses or first and second computer systems, an address of traffic through a device in the first computer system, and an address of an entity responsible for the attack on the second computer system. Based on a similarity between the characteristics of the first and second businesses, a likelihood that the entity responsible for the attack on the second computer system will attack the first computer system of the first business is determined.

US Patent:

20150271199, Sep 24, 2015

Filed:

Mar 19, 2014

Appl. No.:

14/219641

Inventors:

- ARMONK NY, US
Gary I. Givental - Royal Oak MI, US
David M. McMillen - Tuxedo Park NY, US
Kaleb D. Walton - Fenton MI, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - ARMONK NY

International Classification:

H04L 29/06
H04L 29/08

Abstract:

An approach is provided for determining a likelihood of an attack on a first computer system of a first business. Characteristics of the first business and a second business are determined. The second business has a second computer system currently or recently under attack. The characteristics include respective industries, sizes, geographical locations, types of sensitive data, and security vulnerabilities associated with the first and second businesses or first and second computer systems, an address of traffic through a device in the first computer system, and an address of an entity responsible for the attack on the second computer system. Based on a similarity between the characteristics of the first and second businesses, a likelihood that the entity responsible for the attack on the second computer system will attack the first computer system of the first business is determined.