Patent ID: 8474042
Filing Date: 2013-06-25
Classification: H04L

Abstract:
1. A non-transitory computer-readable medium comprising computer-executable instructions that when executed by a processor cause the processor to perform: detecting activities associated with a plurality of user accounts involving a plurality of removable media controls, unencrypted transmission controls, and encrypted targeted communication controls over a first network; quantifying a quantity of attributes of accesses having access rights during a first time period; detecting that a user account accessed a removable storage device; determining if the user account has permission rights to conduct the access to the removable storage device; wherein if the user account does not have permission rights, determining that an activity violation has occurred, and wherein if the user account does have permission rights, storing an attribute of the access; determining if an activity violation occurred; quantifying activity violations of the detected activities; determining whether a threshold quantity of activity violations has been met for a first user account of the plurality of user accounts; and calculating a predictive threat rating for the first user account if the threshold quantity is met.