Kevin M Long

US Patent:

20130160119, Jun 20, 2013

Filed:

Dec 19, 2011

Appl. No.:

13/329931

Inventors:

A. Bryan SARTIN - Dallas TX, US
Gina M. Ganley - Millstone Twp NJ, US
Kevin Long - Marysville PA, US
Jo Ann Joels - Tulsa OK, US

Assignee:

VERIZON PATENT AND LICENSING INC. - Basking Ridge NJ

International Classification:

G06F 11/00
G06F 21/00
G06F 15/16

US Classification:

726 23

Abstract:

A computing device may receive netflow data that includes information corresponding to network-side activity associated with a target device. The computing device may evaluate the netflow data based on a netflow signature to identify potentially malicious activity. The netflow signature may include information corresponding to two or more network events occurring in a particular order. The computing device may report, to another computing device, that potentially malicious activity, corresponding to the network data, has been detected based on the evaluation of the netflow data.

US Patent:

20130160129, Jun 20, 2013

Filed:

Dec 19, 2011

Appl. No.:

13/329920

Inventors:

A. Bryan SARTIN - Dallas TX, US
Gina M. GANLEY - Millstone Twp NJ, US
Kevin LONG - Marysville PA, US
Jo Ann JOELS - Tulsa OK, US

Assignee:

VERIZON PATENT AND LICENSING INC. - Basking Ridge NJ

International Classification:

G06F 11/00
G06F 21/00

US Classification:

726 25

Abstract:

A computing device may receive external activity data corresponding to a target system. The external activity data may include information corresponding to network-side information relating to the target system. The computing device may identify suspicious external activity, corresponding to the external activity data, based on an activity watchlist. The activity watchlist may include information corresponding to external activity systems associated with known sources of malicious activity. The computing device may generate a system security report based on the suspicious external activity identified.