Thomas W Clements

US Patent:

20210014067, Jan 14, 2021

Filed:

Sep 28, 2020

Appl. No.:

17/034504

Inventors:

- Wilmington DE, US
Thomas Clements - Kennesaw GA, US

International Classification:

H04L 9/32
H04L 29/06
G06F 21/62
H04L 9/06
G06F 21/34
G06F 21/35
G06F 21/31

Abstract:

A system for providing secure authentication between a service provider and at least one user device having a storage. The system having a processor managed by the service provider, which processor manages authentication between the at least one device and the service provider. The processor is configured to generate a block including at least user account information upon receipt of an authentication request from the at least one device; apply a cryptographic hash function to the block to create a hash; transmit the hash to the at least one device for storage in the memory of the at least one device; and upon receipt of the hash, validate the hash prior to providing access to the service provider.

US Patent:

20190132131, May 2, 2019

Filed:

Oct 27, 2017

Appl. No.:

15/795804

Inventors:

- Wilmington DE, US
Thomas Clements - Kennesaw GA, US

Assignee:

SecureWorks Corp. - Wilmington DE

International Classification:

H04L 9/32
H04L 29/06
H04L 9/06
G06F 21/62

Abstract:

A system for providing secure authentication between a service provider and at least one user device having a storage. The system having a processor managed by the service provider, which processor manages authentication between the at least one device and the service provider. The processor is configured to generate a block including at least user account information upon receipt of an authentication request from the at least one device; apply a cryptographic hash function to the block to create a hashed block; transmit the hashed block to the at least one device for storage in the memory of the at least one device; and upon receipt of the hashed block, validate the hashed block prior to providing access to the service provider.

US Patent:

20170208084, Jul 20, 2017

Filed:

Jan 18, 2016

Appl. No.:

14/997761

Inventors:

- Atlanta GA, US
Todd Wiedman - Acworth GA, US
Kenneth A. Deitz - Atlanta GA, US
Berlene Herren - Fairburn GA, US
Edgar L. Deal - Gainsville GA, US
Thomas Clements - Kennesaw GA, US
Brian Miller - Woodstock GA, US

International Classification:

H04L 29/06
G06N 99/00

Abstract:

An information handling system performs a method for analyzing attacks against a networked system of information handling systems. The method includes detecting a threat indicator, representing the threat indicator in part by numerical parameters, normalizing the numerical parameters, calculating one or more measures of association between the threat indicator and other threat indicators, finding an association of the threat indicator with another threat indicator based upon the normalized numerical parameters, and assigning to the threat indicator a probability that a threat actor group caused the attack, wherein the threat actor group was assigned to the other threat indicator. In some embodiments, the normalizing may include transforming a distribution of the numerical parameters to a distribution with a standard deviation of 1 and a mean of 0. In some embodiments, the normalizing may include applying an empirical cumulative distribution function. In some embodiments, the one or more measures of association between the threat indicator and other threat indicators may include a Kendall's tau between the threat indicator and the other threat indicators, a covariance between the threat indicator and the other threat indicators; or a conditional entropy between the threat indicator and the other threat indicators.

US Patent:

20170208085, Jul 20, 2017

Filed:

Jan 18, 2016

Appl. No.:

14/997763

Inventors:

- Atlanta GA, US
Todd Wiedman - Acworth GA, US
Kenneth A. Deitz - Atlanta GA, US
Berlene Herren - Fairburn GA, US
Edgar L. Deal - Gainsville GA, US
Thomas Clements - Kennesaw GA, US
Brian Miller - Woodstock GA, US

International Classification:

H04L 29/06
G06N 99/00

Abstract:

An information handling system performs a method for analyzing attacks against a networked system of information handling systems. The method includes detecting a threat indicator, representing the threat indicator in part by numerical parameters, normalizing the numerical parameters, calculating one or more measures of association between the threat indicator and other threat indicators, finding an association of the threat indicator with another threat indicator based upon the normalized numerical parameters, and assigning to the threat indicator a probability that a threat actor group caused the attack, wherein the threat actor group was assigned to the other threat indicator.