Aaron J Marks

US Patent:

20200410099, Dec 31, 2020

Filed:

Sep 11, 2020

Appl. No.:

17/019166

Inventors:

- Irvine CA, US
Daniel W. Brown - Beverly MA, US
Aaron Javan Marks - Warminster PA, US
Kirby J. Koster - Lino Lakes MN, US
Daniel T. Martin - Burlington NJ, US

International Classification:

G06F 21/56
H04L 29/06
G06F 21/55

Abstract:

A security agent implemented on a monitored computing device is described herein. The security agent has access to parametric behavioral pattern definitions that, in combination with canonical patterns of behavior, configure the security agent to match observed behavior with known computing behavior that is benign or malignant. This arrangement of the definitions and the pattern of behavior allow the security agent's behavior to be updated by a remote security service without updating a configuration of the security agent. The remote security service can create, modify, and disseminate these definitions and patterns of behavior, giving the security agent real-time ability to respond to new behaviors exhibited by the monitored computing device.

US Patent:

20180322286, Nov 8, 2018

Filed:

May 2, 2017

Appl. No.:

15/585156

Inventors:

- Irvine CA, US
Daniel W. Brown - Beverly MA, US
Aaron Javon Marks - Warminster PA, US
Kirby Koster - Minneapolis MN, US
Daniel T. Martin - Burlington NJ, US

International Classification:

G06F 21/56
H04L 29/06

Abstract:

A security agent implemented on a monitored computing device is described herein. The security agent has access to parametric behavioral pattern definitions that, in combination with canonical patterns of behavior, configure the security agent to match observed behavior with known computing behavior that is benign or malignant. This arrangement of the definitions and the pattern of behavior allow the security agent's behavior to be updated by a remote security service without updating a configuration of the security agent. The remote security service can create, modify, and disseminate these definitions and patterns of behavior, giving the security agent real-time ability to respond to new behaviors exhibited by the monitored computing device.