Patents by Inventor Ramasubramanian Sekar

Ramasubramanian Sekar has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • System and method associated with expedient detection and reconstruction of cyber events in a compact scenario representation using provenance tags and customizable policy
    Patent number: 11601442
    Abstract: A system associated with detecting a cyber-attack and reconstructing events associated with a cyber-attack campaign, is disclosed. The system performs various operations that include receiving an audit data stream associated with cyber events. The system identifies trustworthiness values in a portion of data associated with the cyber events and assigns provenance tags to the portion of the data based on the identified trustworthiness values. An initial visual representation is generated based on the assigned provenance tags to the portion of the data. The initial visual representation is condensed based on a backward traversal of the initial visual representation in identifying a shortest path from a suspect node to an entry point node. A scenario visual representation is generated that specifies nodes most relevant to the cyber events associated with the cyber-attack based on the identified shortest path. A corresponding method and computer-readable medium are also disclosed.
    Type: Grant
    Filed: August 19, 2019
    Date of Patent: March 7, 2023
    Assignees: THE RESEARCH FOUNDATION FOR THE STATE UNIVERSITY OF NEW YORK, THE BOARD OF TRUSTEES OF THE UNIVERSITY OF ILLINOIS
    Inventors: Ramasubramanian Sekar, Junao Wang, Md Nahid Hossain, Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan, Scott Stoller
  • SYSTEM AND METHOD ASSOCIATED WITH EXPEDIENT DETECTION AND RECONSTRUCTION OF CYBER EVENTS IN A COMPACT SCENARIO REPRESENTATION USING PROVENANCE TAGS AND CUSTOMIZABLE POLICY
    Publication number: 20200059481
    Abstract: A system associated with detecting a cyber-attack and reconstructing events associated with a cyber-attack campaign, is disclosed. The system performs various operations that include receiving an audit data stream associated with cyber events. The system identifies trustworthiness values in a portion of data associated with the cyber events and assigns provenance tags to the portion of the data based on the identified trustworthiness values. An initial visual representation is generated based on the assigned provenance tags to the portion of the data. The initial visual representation is condensed based on a backward traversal of the initial visual representation in identifying a shortest path from a suspect node to an entry point node. A scenario visual representation is generated that specifies nodes most relevant to the cyber events associated with the cyber-attack based on the identified shortest path. A corresponding method and computer-readable medium are also disclosed.
    Type: Application
    Filed: August 19, 2019
    Publication date: February 20, 2020
    Inventors: Ramasubramanian Sekar, Junao Wang, Md Nahid Hossain, Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V.N. Venkatakrishnan, Scott Stoller
  • Specification-based anomaly detection
    Patent number: 7370357
    Abstract: A method for network intrusion detection on a network comprising a plurality of state machines for passing a plurality of network packets comprises determining frequency distributions for each transition within each state machine, determining the distributions of values of each state machine on each transition, and comparing the distributions to observed statistics in the network, and upon determining that the observed statistics are outside defined limits, detecting an anomaly.
    Type: Grant
    Filed: November 18, 2002
    Date of Patent: May 6, 2008
    Assignee: Research Foundation of the State University of New York
    Inventor: Ramasubramanian Sekar
  • Specification-based anomaly detection
    Publication number: 20040098617
    Abstract: A method for network intrusion detection on a network comprising a plurality of state machines for passing a plurality of network packets comprises determining frequency distributions for each transition within each state machine, determining the distributions of values of each state machine on each transition, and comparing the distributions to observed statistics in the network, and upon determining that the observed statistics are outside defined limits, detecting an anomaly.
    Type: Application
    Filed: November 18, 2002
    Publication date: May 20, 2004
    Applicant: Research Foundation of the State University of New York
    Inventor: Ramasubramanian Sekar