System for across rail silo system integration and logic repository

Patent metadata

Field	Value
Publication number	US-10721246-B2
Application number	US-201715798155-A
Country	US
Kind code	B2
Filing date	Oct 30, 2017
Priority date	Oct 30, 2017
Publication date	Jul 21, 2020
Grant date	Jul 21, 2020

Abstract

Systems, computer program products, and methods are described herein for the creation of an exposure identification and distribution system for across silo channel integration. In this way, the system allows team integration of data across rails and silos for exposure identification. As such, the system generates a centralized repository for data and a communication linkage across the various systems used for identifying exposure and manipulated for linkage via a specific taxonomy overlay. Furthermore the system also includes logic that, when identification of a potential exposure indicate occurs, the system may communicate via distribution over the rails for integration and sharing for cross entity exposure identification.

First claim

What is claimed is:

1. A system for across silo system integration, the system comprising:
a memory device with computer-readable program code stored thereon;
a communication device;
a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to:
identify one or more devices across an entity network, wherein the one or more devices are associated with exposure strategy users identifying exposure events within the entity;
generate a communication linkage with the one or more devices and a centralized repository for exposure event storage;
receive one or more exposure events from the one or more devices;
transmit information associated with the one or more exposure events to the centralized repository via selective connectivity communication linkage;
identify that the one or more exposure events does not reach a threshold level of a red-flag exposure event;
aggregate the transmitted information associated with the one or more exposure events received within the centralized repository across multiple categories of exposure events to identify a combination of exposure events indicating a potential intrusion, wherein the combination of exposure events include at least a portion of each of the one or more exposure events;
perform a taxonomy overlay of the aggregated one or more exposure events, wherein the taxonomy overlay identifies a combination of one or more exposure events across strategy teams within an entity to identify exposure of intrusion to the entity;
trigger a mitigation response from the entity as opposed to from each strategy team based on the combination of the exposure events reaching the threshold level of the red-flag exposure event; and
transmit via a secure single node strategy team communication the combination of one or more exposure events from the mitigation response while maintaining a fluid environment for centralized repository storage of the one or more exposure events with communication channels across an entity.

2. The system of claim 1 , wherein generating a communication linkage with the one or more devices and a centralized repository for exposure event storage further comprises generating communication linkage with the one or more devices and maintain single node communication compatibility.

3. The system of claim 1 , wherein receiving one or more exposure events from the one or more devices via the communication linkage further comprises integrating into applications on the one or more devices and extracting identified exposure events.

4. The system of claim 1 , wherein the exposure events comprise one or more intrusions associated with a department within the entity, wherein the one or more intrusions include benign intrusions or require a mitigation response based on a review.

5. The system of claim 1 , wherein the taxonomy overlay identifies a combination of one or more exposure events triggering a mitigation response further comprises combining one or more exposure events that are benign to generate a combination of multiple exposure events that trigger, in combination, the mitigation response requirement.

6. The system of claim 1 , wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises communicating directly to specific devices associated with exposure strategy users for performing the mitigation response via a single node communication while maintaining the centralized repository and the communication linkage with the one or more devices across the entity.

7. The system of claim 1 , wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises triggering logic communication to the device associated with the one or more exposure events identified in the combination.

8. A computer program product for across silo system integration, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:
an executable portion configured for identifying one or more devices across an entity network, wherein the one or more devices are associated with exposure strategy users identifying exposure events within the entity;
an executable portion configured for generating a communication linkage with the one or more devices and a centralized repository for exposure event storage;
an executable portion configured for receiving one or more exposure events from the one or more devices;
an executable portion configured for transmitting information associated with the one or more exposure events to the centralized repository via selective connectivity communication linkage;
an executable portion configured for identifying that the one or more exposure events does not reach a threshold level of a red-flag exposure event;
an executable portion configured for aggregating the transmitted information associated with the one or more exposure events received within the centralized repository across multiple categories of exposure events to identify a combination of exposure events indicating a potential intrusion, wherein the combination of exposure events include at least a portion of each of the one or more exposure events;
an executable portion configured for performing a taxonomy overlay of the aggregated one or more exposure events, wherein the taxonomy overlay identifies a combination of one or more exposure events across strategy teams within an entity to identify exposure of intrusion to the entity;
an executable portion configured for triggering a mitigation response from the entity as opposed to from each strategy team based on the combination of the exposure events reaching the threshold level of the red-flag exposure event; and
an executable portion configured for transmitting via a secure single node strategy team communication the combination of one or more exposure events from the mitigation response while maintaining a fluid environment for centralized repository storage of the one or more exposure events with communication channels across an entity.

9. The computer program product of claim 8 , wherein generating a communication linkage with the one or more devices and a centralized repository for exposure event storage further comprises generating communication linkage with the one or more devices and maintain single node communication compatibility.

10. The computer program product of claim 8 , wherein receiving one or more exposure events from the one or more devices via the communication linkage further comprises integrating into applications on the one or more devices and extracting identified exposure events.

11. The computer program product of claim 8 , wherein the exposure events comprise one or more intrusions associated with a department within the entity, wherein the one or more intrusions include benign intrusions or require a mitigation response based on a review.

12. The computer program product of claim 8 , wherein the taxonomy overlay identifies a combination of one or more exposure events triggering a mitigation response further comprises combining one or more exposure events that are benign to generate a combination of multiple exposure events that trigger, in combination, the mitigation response requirement.

13. The computer program product of claim 8 , wherein transmitting via single node communication the combination of one or more exposure events from the mitigation

Assignees

• Bank Of America

Inventors

• Sims Scott Anderson
• Bell Kolt Arthur
• Carroll Michael Joseph
• Kim Andrew Dongho
• Piatetsky Elliot
• Schneeweis Stephen M
• Toth Michael E
• Widmann Craig D
• Satija Dharmender Kumar
• Alapati Sai Kishan
• Shah Hitesh J

Classifications

• H04L63/1441 Primary

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/1416 Primary

  Event detection, e.g. attack signature detection · CPC title