Dennis Dennis Joseph

US Patent:

20200344253, Oct 29, 2020

Filed:

Apr 28, 2020

Appl. No.:

16/861030

Inventors:

- New York NY, US
Kanishka HETTIARACHCHI - Chatham NJ, US
Vladimir BELINKIS - Freehold NJ, US
Ish K. AHLUWALIA - East Brunswick NJ, US
Ricky Hei Wong CHAN - Woodside NY, US
Dennis JOSEPH - San Jose CA, US

International Classification:

H04L 29/06
G06F 21/31
G06N 20/00

Abstract:

Systems and methods for data-driven infrastructure controls are disclosed. According to one embodiment, in an information processing apparatus comprising at least one computer processor, a computer-implemented method for automatically detecting anomalous user behavior within a unified entitlement framework may include: (1) receiving an access request for a technology asset from a user on a computing device, the access request comprising session data comprising one or more of user identification, user location, key strokes, and user computing device identification; (2) applying an entitlement-specific machine learning algorithm to the session data to generate an anomaly score; (3) storing the session data and associated anomaly score; (4) sending a review request to a manager; (5) receiving review results from the manager; and (6) updating the entitlement-specific machine learning algorithm based on the anomaly score and the review results from the manager.

US Patent:

20200195650, Jun 18, 2020

Filed:

Dec 14, 2018

Appl. No.:

16/220784

Inventors:

- New York NY, US
Kanishka Hettiarachchi - Chatham NJ, US
Vladimir Belinkis - Freehold NJ, US
Ish K. Ahluwalia - East Brunswick NJ, US
Ricky Hei Wong Chan - Woodside NY, US
Dennis Joseph - San Jose CA, US

International Classification:

H04L 29/06
G06F 21/60
G06F 21/62
G06F 21/31
H04L 29/08
H04L 12/66

Abstract:

In one embodiment, in access gateway comprising at least one computer processor, a method for real-time data protection may include: (1) receiving a user login comprising a user identifier; (2) retrieving, using an in-memory entitlements graph, a role definition for the user identifier, wherein the role definition comprises allowed actions, entitled assets, and a system account; (3) receiving a selection of a requested asset from the entitled assets and a requested action from the allowed actions; (4) verifying the user's entitlement to access the requested asset and perform the requested action with the system account using the in-memory entitlement graph based on the user identifier, the system account, the requested asset, and the requested action; and (5) authorizing the user's entitlement to access the requested asset and perform the requested action with the system account substantially at a time of requested access.