Patent ID: 8424072
Filing Date: 2013-04-16
Classification: H04L

Abstract:
1. A method of detecting unauthorized access to a network, the network comprising at least one client computing device and at least one security server regulating access to the network for the at least one client computing device, the method comprising: (A) receiving, at the at least one security server from a client computing device, at least one request for a security operation to be performed for an entity; (B) using a processor, comparing properties of the at least one request to a behavioral profile for the entity to determine a similarity score for the at least one request, the similarity score is a probability of similarity that indicates a degree of similarity of the at least one request to the behavior profile of the entity, the behavioral profile generated by an artificial intelligence technique by analyzing properties of a plurality of previous requests for security operations transmitted by the entity to determine properties of authorized access requests to the network to identify expected behaviors for the entity; (C) when the similarity score is below a threshold, increasing security restrictions on the entity, wherein the act (C) of increasing the security restrictions comprises: (D) adjusting the behavioral profile based on the properties of the at least one request, wherein the act (D) of adjusting is performed when the similarity score is above the threshold and/or when the entity passes the at least one security check.