Patents by Inventor Nastaran Baradaran

Nastaran Baradaran has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 11457024
    Abstract: Embodiments described include a computing device for generating risk scores of network entities. The computing device can include one or more processors configured to detect a plurality of risk indicators. Each of the risk indicators identify one of a plurality of activities of a network entity of an organization. The network entity includes a device, an application or a user in the organization's network. The one or more processors can generate a risk score of the network entity, by combining a risk value, an amplification factor and a dampening factor of each of the plurality of risk indicators, and adding an adjustment value for the plurality of risk indicators. The one or more processors can determine, using the generated risk score, a normalized risk score of the network entity. The one or more processors can initiate an action according to the normalized risk score.
    Type: Grant
    Filed: February 22, 2019
    Date of Patent: September 27, 2022
    Assignee: Citrix Systems, Inc.
    Inventors: Rishabh Bindal, Nastaran Baradaran
  • Patent number: 11379443
    Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.
    Type: Grant
    Filed: July 6, 2020
    Date of Patent: July 5, 2022
    Assignee: Citrix Systems, Inc.
    Inventors: Nastaran Baradaran, Deepak Nagaraj, Muraliraja Muniraju
  • Publication number: 20220053051
    Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.
    Type: Application
    Filed: October 28, 2021
    Publication date: February 17, 2022
    Applicant: Citrix Systems, Inc.
    Inventors: Nastaran Baradaran, Muraliraja Muniraju
  • Patent number: 11165856
    Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.
    Type: Grant
    Filed: April 25, 2017
    Date of Patent: November 2, 2021
    Assignee: Citrix Systems, Inc.
    Inventors: Nastaran Baradaran, Muraliraja Muniraju
  • Publication number: 20200334216
    Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.
    Type: Application
    Filed: July 6, 2020
    Publication date: October 22, 2020
    Inventors: Nastaran Baradaran, Deepak Nagaraj, Muraliraja Muniraju
  • Patent number: 10706028
    Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.
    Type: Grant
    Filed: April 25, 2017
    Date of Patent: July 7, 2020
    Assignee: Citrix Systems, Inc.
    Inventors: Nastaran Baradaran, Deepak Nagaraj, Muraliraja Muniraju
  • Publication number: 20200067948
    Abstract: The present disclosure is directed towards systems and methods for detecting anomalous network traffic. Network traffic corresponding to an application executed by a server can be received. Application characteristics of the application can be identified to select an anomaly detection profile. The anomaly detection profile can be selected based on the identified application characteristics. The anomaly detection profile can include a set of detection features for the anomaly and one or more predetermined threshold values of the detection features. One or more feature values of the set of one or more detection features can be determined. An anomaly in the network traffic can be detected responsive to comparing the feature values and the predetermined threshold values of the detection features.
    Type: Application
    Filed: October 28, 2019
    Publication date: February 27, 2020
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur
  • Publication number: 20200045064
    Abstract: Embodiments described include a computing device for generating risk scores of network entities. The computing device can include one or more processors configured to detect a plurality of risk indicators. Each of the risk indicators identify one of a plurality of activities of a network entity of an organization. The network entity includes a device, an application or a user in the organization's network. The one or more processors can generate a risk score of the network entity, by combining a risk value, an amplification factor and a dampening factor of each of the plurality of risk indicators, and adding an adjustment value for the plurality of risk indicators. The one or more processors can determine, using the generated risk score, a normalized risk score of the network entity. The one or more processors can initiate an action according to the normalized risk score.
    Type: Application
    Filed: February 22, 2019
    Publication date: February 6, 2020
    Inventors: Rishabh Bindal, Nastaran Baradaran
  • Patent number: 10476893
    Abstract: The present disclosure is directed towards systems and methods for detecting anomalous network traffic. Network traffic corresponding to an application executed by a server can be received. Application characteristics of the application can be identified to select an anomaly detection profile. The anomaly detection profile can be selected based on the identified application characteristics. The anomaly detection profile can include a set of detection features for the anomaly and one or more predetermined threshold values of the detection features. One or more feature values of the set of one or more detection features can be determined. An anomaly in the network traffic can be detected responsive to comparing the feature values and the predetermined threshold values of the detection features.
    Type: Grant
    Filed: October 30, 2015
    Date of Patent: November 12, 2019
    Assignee: CITRIX SYSTEMS, INC.
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur
  • Patent number: 10318886
    Abstract: The present disclosure is directed towards systems and methods for improving anomaly detection using injected outliers. A normalcy calculator of a device may include a set of outliers into a training dataset of data points. The normalcy calculator, using a K-means clustering algorithm applied on the training dataset, identify at least a first cluster of data points. The normalcy calculator of the device may determine a region with a center and an outer radius that covers at least a spatial extent of the first cluster of data points. The normalcy calculator may determine a first normalcy radius for the first cluster by reducing the region around the center until a point at which all artificial outliers are excluded from a region defined by the first normalcy radius. An outlier detector of the device may use the region defined by the first normalcy radius to determine whether a new data point is normal or abnormal.
    Type: Grant
    Filed: October 30, 2015
    Date of Patent: June 11, 2019
    Assignee: CITRIX SYSTEMS, INC.
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur
  • Patent number: 10116674
    Abstract: The present disclosure is directed towards systems and methods for characterizing anomalous network traffic. The system includes a device intermediary to clients and servers. The device includes a network traffic engine to receive network traffic including an anomaly. The device includes a univariate policy manager to determine whether the network traffic satisfies at least one of the rules of a univariate policy based on a respective single independent network traffic feature. The device includes a multivariate policy manager to determine, responsive to determining that the network traffic does not satisfy the rules of the univariate policy, that the network satisfies a multivariate policy including a plurality of anomaly explanation tests. The device includes an anomaly explanation selector to select, responsive to determining that the network traffic satisfies the multivariate policy, an anomaly explanation.
    Type: Grant
    Filed: October 30, 2015
    Date of Patent: October 30, 2018
    Assignee: Citrix Systems, Inc.
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur
  • Publication number: 20180307712
    Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.
    Type: Application
    Filed: April 25, 2017
    Publication date: October 25, 2018
    Inventors: Nastaran Baradaran, Deepak Nagaraj, Muraliraja Muniraju
  • Publication number: 20180309822
    Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.
    Type: Application
    Filed: April 25, 2017
    Publication date: October 25, 2018
    Inventors: Nastaran Baradaran, Muraliraja Muniraju
  • Publication number: 20170126718
    Abstract: The present disclosure is directed towards systems and methods for characterizing anomalous network traffic. The system includes a device intermediary to clients and servers. The device includes a network traffic engine to receive network traffic including an anomaly. The device includes a univariate policy manager to determine whether the network traffic satisfies at least one of the rules of a univariate policy based on a respective single independent network traffic feature. The device includes a multivariate policy manager to determine, responsive to determining that the network traffic does not satisfy the rules of the univariate policy, that the network satisfies a multivariate policy including a plurality of anomaly explanation tests. The device includes an anomaly explanation selector to select, responsive to determining that the network traffic satisfies the multivariate policy, an anomaly explanation.
    Type: Application
    Filed: October 30, 2015
    Publication date: May 4, 2017
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur
  • Publication number: 20170126709
    Abstract: The present disclosure is directed towards systems and methods for detecting anomalous network traffic. Network traffic corresponding to an application executed by a server can be received. Application characteristics of the application can be identified to select an anomaly detection profile. The anomaly detection profile can be selected based on the identified application characteristics. The anomaly detection profile can include a set of detection features for the anomaly and one or more predetermined threshold values of the detection features. One or more feature values of the set of one or more detection features can be determined. An anomaly in the network traffic can be detected responsive to comparing the feature values and the predetermined threshold values of the detection features.
    Type: Application
    Filed: October 30, 2015
    Publication date: May 4, 2017
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur
  • Publication number: 20170124478
    Abstract: The present disclosure is directed towards systems and methods for improving anomaly detection using injected outliers. A normalcy calculator of a device may include a set of outliers into a training dataset of data points. The normalcy calculator, using a K-means clustering algorithm applied on the training dataset, identify at least a first cluster of data points. The normalcy calculator of the device may determine a region with a center and an outer radius that covers at least a spatial extent of the first cluster of data points. The normalcy calculator may determine a first normalcy radius for the first cluster by reducing the region around the center until a point at which all artificial outliers are excluded from a region defined by the first normalcy radius. An outlier detector of the device may use the region defined by the first normalcy radius to determine whether a new data point is normal or abnormal.
    Type: Application
    Filed: October 30, 2015
    Publication date: May 4, 2017
    Inventors: Nastaran Baradaran, Anoop Reddy, Ratnesh Singh Thakur