Patents by Inventor Xinwai Xue

Xinwai Xue has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Cyber security adaptive analytics threat monitoring system and method
    Patent number: 9531738
    Abstract: A system and method of detecting command and control behavior of malware on a client computer is disclosed. One or more DNS messages are monitored from one or more client computers to a DNS server to determine a risk that one or more client computers is communicating with a botnet. Real-time entity profiles are generated for at least one of each of the one or more client computers, DNS domain query names, resolved IP addresses of query domain names, client computer-query domain name pairs, pairs of query domain name and corresponding resolved IP address, or query domain name-IP address cliques based on each of the one or more DNS messages. Using the real-time entity profiles, a risk that any of the one or more client computers is infected by malware that utilizes DNS messages for command and control or illegitimate data transmission purposes is determined. One or more scores are generated representing probabilities that one or more client computers is infected by malware.
    Type: Grant
    Filed: September 21, 2015
    Date of Patent: December 27, 2016
    Assignee: FAIR ISAAC CORPORATION
    Inventors: Scott Michael Zoldi, Jehangir Athwal, Hua Li, Matthew Bochner Kennel, Xinwai Xue
  • CYBER SECURITY ADAPTIVE ANALYTICS THREAT MONITORING SYSTEM AND METHOD
    Publication number: 20160014147
    Abstract: A system and method of detecting command and control behavior of malware on a client computer is disclosed. One or more DNS messages are monitored from one or more client computers to a DNS server to determine a risk that one or more client computers is communicating with a botnet. Real-time entity profiles are generated for at least one of each of the one or more client computers, DNS domain query names, resolved IP addresses of query domain names, client computer-query domain name pairs, pairs of query domain name and corresponding resolved IP address, or query domain name-IP address cliques based on each of the one or more DNS messages. Using the real-time entity profiles, a risk that any of the one or more client computers is infected by malware that utilizes DNS messages for command and control or illegitimate data transmission purposes is determined. One or more scores are generated representing probabilities that one or more client computers is infected by malware.
    Type: Application
    Filed: September 21, 2015
    Publication date: January 14, 2016
    Applicant: FAIR ISAAC CORPORATION
    Inventors: Scott Michael Zoldi, Jehangir Athwal, Hua Li, Matthew Bochner Kennel, Xinwai Xue