Patents by Inventor SEOKKYUNG CHUNG
SEOKKYUNG CHUNG has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11810008Abstract: A copy of a model comprising a plurality of trees is received, as is a copy of training set data comprising a plurality of training set examples. For each tree included in the plurality of trees, the training set data is used to determine which training set examples are classified as a given leaf. A blame forest is generated at least in part by mapping each training set item to the respective leaves at which it arrives.Type: GrantFiled: August 6, 2022Date of Patent: November 7, 2023Assignee: Palo Alto Networks, Inc.Inventors: William Redington Hewlett, II, Seokkyung Chung, Lin Xu
-
Publication number: 20230353595Abstract: An inline and offline machine learning pipeline for detection of phishing attacks with a holistic, easily upgradeable framework is presented herein. A packet analyzer records capture logs of network traffic between an endpoint device and a firewall. A parser extracts inputs from the capture logs inline that it communicates to one of an inline model and an offline model for phishing detection. The inline model and offline model are neural networks with parallelizable network architectures that do not depend on handcrafted inputs. The inline model operates inline with the packet analyzer and parser and makes fast phishing attack classifications based on inputs generated from capture logs. The offline model uses additional inputs such as inputs generated from network logs to make phishing attack classifications.Type: ApplicationFiled: April 29, 2022Publication date: November 2, 2023Inventors: Lucas Mingyuan Hu, Seokkyung Chung, Jingwei Fan, Wei Wang, Brody James Kutt, William Redington Hewlett, II
-
Publication number: 20230336524Abstract: Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.Type: ApplicationFiled: June 21, 2023Publication date: October 19, 2023Inventors: Daiping Liu, Martin Walter, Ben Hua, Suquan Li, Fan Fei, Seokkyung Chung, Jun Wang, Wei Xu
-
Patent number: 11729134Abstract: Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.Type: GrantFiled: September 30, 2019Date of Patent: August 15, 2023Assignee: Palo Alto Networks, Inc.Inventors: Daiping Liu, Martin Walter, Ben Hua, Suquan Li, Fan Fei, Seokkyung Chung, Jun Wang, Wei Xu
-
Publication number: 20220374724Abstract: A copy of a model comprising a plurality of trees is received, as is a copy of training set data comprising a plurality of training set examples. For each tree included in the plurality of trees, the training set data is used to determine which training set examples are classified as a given leaf. A blame forest is generated at least in part by mapping each training set item to the respective leaves at which it arrives.Type: ApplicationFiled: August 6, 2022Publication date: November 24, 2022Inventors: William Redington Hewlett, II, Seokkyung Chung, Lin Xu
-
Patent number: 11455551Abstract: An identification of an item that was misclassified by a classification model constructed in accordance with a machine learning technique is received. One example of such a machine learning technique is a random forest. A subset of training data, previously used to construct the model, and that is associated with the misclassified item is identified. At least a portion of the identified subset is provided as output.Type: GrantFiled: March 18, 2019Date of Patent: September 27, 2022Assignee: Palo Alto Networks, Inc.Inventors: William Redington Hewlett, II, Seokkyung Chung, Lin Xu
-
Patent number: 11216513Abstract: A website misclassification report is received, indicating that a website has been misclassified. A determination is made that a current classification model correctly classifies the reported website. The current classification model is different from a model that was previously used to classify the website. In response to a determination that the reported website should be reclassified using the current classification model, a reclassification operation is performed, using the current classification model, on a set of websites determined to be similar to the reported website.Type: GrantFiled: February 28, 2017Date of Patent: January 4, 2022Assignee: Palo Alto Networks, Inc.Inventors: Lei Zhang, Lin Xu, Seokkyung Chung, Xunhua Tong
-
Publication number: 20210365503Abstract: A website misclassification report is received. A determination is made that a current classification model correctly classifies a website. The current classification model is different from a model that was previously used to classify the website. In response to a determination that the website is correctly classified by the current classification model, a reclassification operation is performed, using the current classification model, on a second website.Type: ApplicationFiled: August 3, 2021Publication date: November 25, 2021Inventors: Lei Zhang, Lin Xu, Seokkyung Chung, Xunhua Tong
-
Publication number: 20210099414Abstract: Detection of algorithmically generated domains is disclosed. A DNS query is received. Markov Chain analysis is performed on a domain included in the received query. A determination of whether the received query implicates an algorithmically generated domain is made based at least in part on a result of the Markov Chain analysis.Type: ApplicationFiled: September 30, 2019Publication date: April 1, 2021Inventors: Daiping Liu, Martin Walter, Ben Hua, Suquan Li, Fan Fei, Seokkyung Chung, Jun Wang, Wei Xu
-
Patent number: 10554736Abstract: Techniques for categorizing mobile uniform resource locators (URLs) that are used by mobile applications are disclosed. A URL is extracted from a mobile application. A category for the URL is determined based on a categorization of the mobile application. The URL and its determined category are then generated as output.Type: GrantFiled: August 21, 2018Date of Patent: February 4, 2020Assignee: Palo Alto Networks, Inc.Inventors: Seokkyung Chung, Farshad Rostamabadi, William Redington Hewlett, II, Zhi Xu, Shadi Rostami-Hesarsorkh, Lin Xu, Lee Klarich
-
Publication number: 20190213489Abstract: An identification of an item that was misclassified by a classification model constructed in accordance with a machine learning technique is received. One example of such a machine learning technique is a random forest. A subset of training data, previously used to construct the model, and that is associated with the misclassified item is identified. At least a portion of the identified subset is provided as output.Type: ApplicationFiled: March 18, 2019Publication date: July 11, 2019Inventors: William Redington Hewlett, II, Seokkyung Chung, Lin Xu
-
Patent number: 10296836Abstract: An identification of an item that was misclassified by a classification model constructed in accordance with a machine learning technique is received. One example of such a machine learning technique is a random forest. A subset of training data, previously used to construct the model, and that is associated with the item is identified. At least a portion of the identified subset is provided as output.Type: GrantFiled: July 27, 2015Date of Patent: May 21, 2019Assignee: Palo Alto Networks, Inc.Inventors: William Redington Hewlett, II, Seokkyung Chung, Lin Xu
-
Publication number: 20190014169Abstract: Techniques for categorizing mobile uniform resource locators (URLs) that are used by mobile applications are disclosed. A URL is extracted from a mobile application. A category for the URL is determined based on a categorization of the mobile application. The URL and its determined category are then generated as output.Type: ApplicationFiled: August 21, 2018Publication date: January 10, 2019Inventors: Seokkyung Chung, Farshad Rostamabadi, William Redington Hewlett, II, Zhi Xu, Shadi Rostami-Hesarsorkh, Lin Xu, Lee Klarich
-
Patent number: 10079876Abstract: Categorizing mobile uniform resource locators (URLs) used by a mobile application is disclosed. A plurality of URLs is extracted from the mobile application. A category is assigned to at least one URL included in the plurality of URLs. The category is assigned to the URL based on a categorization of the mobile application.Type: GrantFiled: September 30, 2014Date of Patent: September 18, 2018Assignee: Palo Alto Networks, Inc.Inventors: Seokkyung Chung, Farshad Rostamabadi, William Hewlett, Zhi Xu, Shadi Rostami-Hesarsorkh, Lin Xu, Lee Klarich
-
Patent number: 9015174Abstract: A plurality of web documents that include indicators corresponding to one or more selectable like objects may be obtained. A corresponding web domain associated with each of the plurality of obtained web documents may be determined. A domain total like object count of the indicators corresponding to the one or more selectable like objects may be determined for each one of the obtained plurality of web documents, for each determined corresponding web domain. A candidate group of the corresponding web domains may be determined based on a comparison of a predetermined first threshold value with one or more of the domain total like object counts. A likefarm domain confidence score may be determined for each one of a second group of the corresponding web domains based on a decision tree function that is based on a plurality of domain attributes.Type: GrantFiled: December 16, 2011Date of Patent: April 21, 2015Assignee: Microsoft Technology Licensing, LLCInventors: Lei Duan, Will Chin, Seokkyung Chung, Lei Guo, Guenther Schmuelling
-
Patent number: 8666984Abstract: Unsupervised clustering can be used for organization of micro-blog or other short length messages into message clusters. Messages can be compared with existing clusters to determine a similarity score. If at least one similarity score is greater than a threshold value, a message can be added to an existing message cluster. If a message is not similar to an existing cluster, the message can be compared against criteria for starting a new message cluster.Type: GrantFiled: March 18, 2011Date of Patent: March 4, 2014Assignee: Microsoft CorporationInventors: Ki Yeun Kim, Lei Duan, Seokkyung Chung
-
Publication number: 20130159319Abstract: A plurality of web documents that include indicators corresponding to one or more selectable like objects may be obtained. A corresponding web domain associated with each of the plurality of obtained web documents may be determined. A domain total like object count of the indicators corresponding to the one or more selectable like objects may be determined for each one of the obtained plurality of web documents, for each determined corresponding web domain. A candidate group of the corresponding web domains may be determined based on a comparison of a predetermined first threshold value with one or more of the domain total like object counts. A likefarm domain confidence score may be determined for each one of a second group of the corresponding web domains based on a decision tree function that is based on a plurality of domain attributes.Type: ApplicationFiled: December 16, 2011Publication date: June 20, 2013Applicant: MICROSOFT CORPORATIONInventors: Lei Duan, Will Chin, Seokkyung Chung, Lei Guo, Guenther Schmuelling
-
Publication number: 20120239650Abstract: Unsupervised clustering can be used for organization of micro-blog or other short length messages into message clusters. Messages can be compared with existing clusters to determine a similarity score. If at least one similarity score is greater than a threshold value, a message can be added to an existing message cluster. If a message is not similar to an existing cluster, the message can be compared against criteria for starting a new message cluster.Type: ApplicationFiled: March 18, 2011Publication date: September 20, 2012Applicant: MICROSOFT CORPORATIONInventors: KI YEUN KIM, LEI DUAN, SEOKKYUNG CHUNG