Patents by Inventor Ahtesham Akhtar Patel

Ahtesham Akhtar Patel has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Data driven parser selection for parsing event logs to detect security threats in an enterprise system
    Patent number: 10984111
    Abstract: A method includes obtaining an incoming event log, splitting the incoming event log into a set of tokens, and identifying a subset of the tokens as anchor tokens. The method also includes utilizing an ordered list of the anchor tokens to traverse through a set of anchor token trees and, responsive to identifying a path from (i) a root node of a given one of the anchor token trees to (ii) a given leaf node of the given anchor token tree corresponding to the ordered list of the anchor tokens, selecting a given parser associated with the given leaf node. The method further includes extracting data from the incoming event log utilizing the given parser, detecting one or more security threats affecting at least one asset in an enterprise system based on the extracted data, and applying at least one remediation action to mitigate the detected security threats.
    Type: Grant
    Filed: May 30, 2019
    Date of Patent: April 20, 2021
    Assignee: EMC IP Holding Company LLC
    Inventors: Ahtesham Akhtar Patel, Ratheesh Nair
  • DATA DRIVEN PARSER SELECTION FOR PARSING EVENT LOGS TO DETECT SECURITY THREATS IN AN ENTERPRISE SYSTEM
    Publication number: 20200380136
    Abstract: A method includes obtaining an incoming event log, splitting the incoming event log into a set of tokens, and identifying a subset of the tokens as anchor tokens. The method also includes utilizing an ordered list of the anchor tokens to traverse through a set of anchor token trees and, responsive to identifying a path from (i) a root node of a given one of the anchor token trees to (ii) a given leaf node of the given anchor token tree corresponding to the ordered list of the anchor tokens, selecting a given parser associated with the given leaf node. The method further includes extracting data from the incoming event log utilizing the given parser, detecting one or more security threats affecting at least one asset in an enterprise system based on the extracted data, and applying at least one remediation action to mitigate the detected security threats.
    Type: Application
    Filed: May 30, 2019
    Publication date: December 3, 2020
    Inventors: Ahtesham Akhtar Patel, Ratheesh Nair