Abstract: According to one embodiment, an information object identification and discovery server have been presented. A given corpus of information is treated as a ‘unique sequence’ of canonical structures. These canonical structures are called information objects that are categorized into a set of primitive types. In real-life, these information objects may represent a physical object, an imaginary object, a conceptual object, or a data/knowledge object about them. The corpus of information is also expected to contain noise objects—these items are not information objects. The corpus of information is also expected to contain items that are not known to be information objects a-priori but are discovered and classified a-posteriori in the process as new knowledge objects. discovery of new information objects: the process results in the “discovery” of new “types” and “classes” of information objects that were not known a-priori.

Abstract: Some embodiments of high granularity reactive measures for selective pruning of information have been presented. The system and apparatus embody algorithms to automatically evaluate the security based significance (also referred to as “information enthalpy”) of a given set of structured, semi-structured or unstructured Data. This is also termed as security parameter index (SPI), represented by a numerical value, and is regarded as the intrinsic property of a given set of structured, semi-structured or unstructured Data. In one embodiment, a security parameter index (SPI) of a set of data is determined based on content of the set of data. If the SPI is above a predetermined threshold, then a security quotient (Sq) of the set of data is further determined based on the SPI and an action to be performed on the set of data in the current situation. Based on the value of the Sq, a data leak prevention policy is automatically defined and enforced on the set of data in the current situation.

Abstract: Some embodiments of a high-accuracy document information element-vector (IE-vector) encoding server have been presented. In one embodiment, the high-accuracy document IE-vector encoding server applies finite state automaton (FSA) to parse a document to identify one or more information elements (IEs) in the document. Then a DNA sequence of the document is derived based on the one or more IEs. The concept of DNA sequence of a document is powerful and can be used in building automated tools such as computer based processes to automatically reason and search for similarity, dissimilarity, equivalence and other relationships between structured, semi-structured and unstructured data and information. The DNA sequence of a document provides powerful paradigm to build sophisticated information and data search and retrieval techniques and tools.

Abstract: Some embodiments of a high-accuracy document information element-vector (IE-vector) encoding server have been presented. In one embodiment, the high-accuracy document IE-vector encoding server applies finite state automaton (FSA) to parse a document to identify one or more information elements (IEs) in the document. Then a DNA sequence of the document is derived based on the one or more IEs. The concept of DNA sequence of a document is powerful and can be used in building automated tools such as computer based processes to automatically reason and search for similarity, dissimilarity, equivalence and other relationships between structured, semi-structured and unstructured data and information. The DNA sequence of a document provides powerful paradigm to build sophisticated information and data search and retrieval techniques and tools.

Abstract: A method and system are provided that prioritizes and presents data for review by a sys admin. The system receives a high volume of intrusion event data, the intrusion event data (“event”) selected as matching at least one of a library of signatures. Significance of particular types of signature match events is determined by one or more of the following statistical methods for detecting signature match types of lesser significance: matches which appear in very large numbers; matches which appear over an extended period of time; and matches which come from many sources or go to many destinations. Signature matches may be presented to a sys admin in a descending order of likelihood of significance, as determined by the Method of the Present Invention. Signature matches determined to be unlikely to be significant might optionally not be automatically presented to the sys admin, archived, and/or accessible by request by the sys admin.