Patents by Inventor Jerry Allen Craig, II
Jerry Allen Craig, II has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 12242616Abstract: A method and system of selecting a software testing regimen for a software application. The method comprises receiving, at a security assessing server computing device, a Quality of Service (QoS) performance level in conjunction with a set of technical attributes of the software application, determining a security vulnerability diagnostic score for the software application based at least in part on the set of technical attributes and the QoS performance level, and selecting the software testing regimen in accordance with the QoS performance level and the security vulnerability diagnostic score.Type: GrantFiled: November 11, 2022Date of Patent: March 4, 2025Assignee: Ventech Solutions, Inc.Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Patent number: 11861018Abstract: A method and system of applying a security vulnerability assessment of a software program. The method comprises directing, from a security assessing server, to a software program under execution, a plurality of attack vectors, diagnosing a set of results associated with the software program under execution as comprising a security vulnerability, the set of results produced based at least in part on the plurality of attack vectors, and assessing a monetary premium of a risk insurance policy merited by an enterprise based at least in part on a level of control ceded to an attacker in accordance with the set of results.Type: GrantFiled: August 30, 2022Date of Patent: January 2, 2024Assignee: Ventech Solutions, Inc.Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, Dipanjan Nag, Eugene Noble, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Patent number: 11727121Abstract: Method and system of deploying a trained machine learning neural network in dynamic testing of security vulnerability in software applications. The method comprises directing, from a security assessing server computing device, to a software program under execution, a series of attack vectors, deploying a set of results produced in accordance with the software program under execution and the attack vectors to an input layer of the trained machine learning neural network, the trained machine learning neural network comprising an output layer that is interconnected with the input layer via a set of intermediate layers, and identifying, in accordance with a predetermined threshold percentage value of false positive software security vulnerability defects, one or more software security vulnerability defects associated with the results produced, the software security vulnerability defects being generated in accordance with the output layer of the trained machine learning neural network.Type: GrantFiled: June 22, 2022Date of Patent: August 15, 2023Assignee: Ventech Solutions, Inc.Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Publication number: 20230141869Abstract: A method and system of selecting a software testing regimen for a software application. The method comprises receiving, at a security assessing server computing device, a Quality of Service (QoS) performance level in conjunction with a set of technical attributes of the software application, determining a security vulnerability diagnostic score for the software application based at least in part on the set of technical attributes and the QoS performance level, and selecting the software testing regimen in accordance with the QoS performance level and the security vulnerability diagnostic score.Type: ApplicationFiled: November 11, 2022Publication date: May 11, 2023Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Patent number: 11640469Abstract: A method and system for security vulnerability diagnostic assessment of an enterprise software application. The method comprises receiving, at a security assessing server, a set of technical attributes of the software application; receiving a set of execution context attributes of the software application; and determining a security vulnerability diagnostic score for the software application based at least in part on the set of technical attributes and the set of execution context attributes.Type: GrantFiled: June 21, 2019Date of Patent: May 2, 2023Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Publication number: 20230068721Abstract: A method and system of applying a security vulnerability assessment of a software program. The method comprises directing, from a security assessing server, to a software program under execution, a plurality of attack vectors, diagnosing a set of results associated with the software program under execution as comprising a security vulnerability, the set of results produced based at least in part on the plurality of attack vectors, and assessing a monetary premium of a risk insurance policy merited by an enterprise based at least in part on a level of control ceded to an attacker in accordance with the set of results.Type: ApplicationFiled: August 30, 2022Publication date: March 2, 2023Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, Dipanjan Nag, Eugene Noble, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Patent number: 11544385Abstract: A method and system for dynamic testing and diagnostic assessment of security vulnerability of cloud-based enterprise software applications. The method comprises directing, to a software program under execution, a series of attack vectors; diagnosing a set of results associated with the software execution as comprising one of a security vulnerability and not a security vulnerability, the set of results produced based at least in part on the attack vectors; and assessing a dynamic security vulnerability score for the software program based at least in part on the diagnosing.Type: GrantFiled: July 29, 2019Date of Patent: January 3, 2023Assignee: Ventech Solutions, Inc.Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, Dipanjan Nag, Eugene Noble, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Publication number: 20220368697Abstract: A method and system of rendering security events in execution of a software application in a communication network. The method comprises receiving, at a memory of a server computing device, a waiver parameter specification identifying a waiver parameter in association with a recipient client device, the waiver parameter pertaining to a security violation event in accordance with a set of predetermined security policy violations, monitoring, via a processor of the server computing device, for the waiver parameter being generated, and generating, based on the monitoring, a waiver notification interface providing capability for including at least a set of successful pipeline execution results as evidence that the security violation event has been resolved.Type: ApplicationFiled: July 27, 2022Publication date: November 17, 2022Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Publication number: 20220335137Abstract: Method and system of deploying a trained machine learning neural network in dynamic testing of security vulnerability in software applications. The method comprises directing, from a security assessing server computing device, to a software program under execution, a series of attack vectors, deploying a set of results produced in accordance with the software program under execution and the attack vectors to an input layer of the trained machine learning neural network, the trained machine learning neural network comprising an output layer that is interconnected with the input layer via a set of intermediate layers, and identifying, in accordance with a predetermined threshold percentage value of false positive software security vulnerability defects, one or more software security vulnerability defects associated with the results produced, the software security vulnerability defects being generated in accordance with the output layer of the trained machine learning neural network.Type: ApplicationFiled: June 22, 2022Publication date: October 20, 2022Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Method and system for neural network based data analytics in software security vulnerability testing
Patent number: 11436335Abstract: A method and system for implementing AI based neural networks for data analytics in dynamic testing of security vulnerability of cloud-based enterprise software applications. The method comprises directing, to a software program under execution, a series of attack vectors; diagnosing an at least a first set of results associated with the software program under execution as comprising one of a security vulnerability and not a security vulnerability, the at least a first set of results produced based at least in part on the attack vectors; and training a machine learning neural network classifier in accordance with a supervised classification that identifies false positive vulnerability defects of the at least a first set of results to produce a trained classifier, the neural network classifier including an input and an output layers connected via at least one intermediate layer that is configured in accordance with an initial matrix of weights.Type: GrantFiled: July 29, 2019Date of Patent: September 6, 2022Assignee: Ventech Solutions, Inc.Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso -
Patent number: 11438339Abstract: A method and system of rendering security events in execution of a software application in a communication network. The method comprises receiving, at a memory of the server computing device, a waiver parameter specification identifying at least one waiver parameter in association with at least one recipient client device of the plurality of client computing devices, the at least one waiver parameter based at least in part on an expected security event in the software application execution; during concurrent execution, in a processor of the server computing device, of object code of the software application, generating at least one waiver task automaton that monitors for the at least one waiver parameter; and generating, based on the monitoring, at a client interface of the at least one recipient communication device, a waiver notification interface in accordance with concurrent execution.Type: GrantFiled: August 7, 2019Date of Patent: September 6, 2022Assignee: Ventech Solutions, Inc.Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Publication number: 20210044593Abstract: A method and system of rendering security events in execution of a software application in a communication network. The method comprises receiving, at a memory of the server computing device, a waiver parameter specification identifying at least one waiver parameter in association with at least one recipient client device of the plurality of client computing devices, the at least one waiver parameter based at least in part on an expected security event in the software application execution; during concurrent execution, in a processor of the server computing device, of object code of the software application, generating at least one waiver task automaton that monitors for the at least one waiver parameter; and generating, based on the monitoring, at a client interface of the at least one recipient communication device, a waiver notification interface in accordance with concurrent execution.Type: ApplicationFiled: August 7, 2019Publication date: February 11, 2021Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
METHOD AND SYSTEM FOR NEURAL NETWORK BASED DATA ANALYTICS IN SOFTWARE SECURITY VULNERABILITY TESTING
Publication number: 20210034753Abstract: A method and system for implementing AI based neural networks for data analytics in dynamic testing of security vulnerability of cloud-based enterprise software applications. The method comprises directing, to a software program under execution, a series of attack vectors; diagnosing an at least a first set of results associated with the software program under execution as comprising one of a security vulnerability and not a security vulnerability, the at least a first set of results produced based at least in part on the attack vectors; and training a machine learning neural network classifier in accordance with a supervised classification that identifies false positive vulnerability defects of the at least a first set of results to produce a trained classifier, the neural network classifier including an input and an output layers connected via at least one intermediate layer that is configured in accordance with an initial matrix of weights.Type: ApplicationFiled: July 29, 2019Publication date: February 4, 2021Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso -
Publication number: 20210034752Abstract: A method and system for dynamic testing and diagnostic assessment of security vulnerability of cloud-based enterprise software applications. The method comprises directing, to a software program under execution, a series of attack vectors; diagnosing a set of results associated with the software execution as comprising one of a security vulnerability and not a security vulnerability, the set of results produced based at least in part on the attack vectors; and assessing a dynamic security vulnerability score for the software program based at least in part on the diagnosing.Type: ApplicationFiled: July 29, 2019Publication date: February 4, 2021Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, Dipanjan Nag, Eugene Noble, David Anthony Rigsby, Richard Nathan Toney, Stephen J. Veneruso
-
Publication number: 20210011743Abstract: A method and system of instantiating a user interface (UI) notification. The method comprises accessing a persona configuration, the persona configuration specified at least in part based on one or more script agents, the script agents including script code arranged in accordance with an execution state flow associated with execution of a software program; executing, in one or more processors of a server device, object code of the software program in accordance with the execution state flow in conjunction with the one or more script agents to generate a set of resultant parameters; and transmitting, to a UI display of a display device that is authorized in association with the persona configuration, information instantiated based on at least a subset of the resultant parameters.Type: ApplicationFiled: July 12, 2019Publication date: January 14, 2021Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney
-
Publication number: 20200401701Abstract: A method and system for security vulnerability diagnostic assessment of an enterprise software application. The method comprises receiving, at a security assessing server, a set of technical attributes of the software application; receiving a set of execution context attributes of the software application; and determining a security vulnerability diagnostic score for the software application based at least in part on the set of technical attributes and the set of execution context attributes.Type: ApplicationFiled: June 21, 2019Publication date: December 24, 2020Inventors: Matthew Canada, Jerry Allen Craig, II, Kathrine Dass, Raja Krishnamurthy, David Anthony Rigsby, Richard Nathan Toney