Computer-Security Event Clustering and Violation Detection
US-2020314117-A1 · Oct 1, 2020 · US
US11908466B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11908466-B2 |
| Application number | US-202016896900-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 9, 2020 |
| Priority date | Jun 9, 2020 |
| Publication date | Feb 20, 2024 |
| Grant date | Feb 20, 2024 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
One or more parameters of one or more processes identified as belonging to a specific process grouping among a plurality of process groupings are obtained. Eligible token words in the one or more parameters are identified. The eligible token words are processed to select a subset within the eligible token words that are likely descriptive of the specific process grouping. The selected subset within the eligible token words is utilized to determine a descriptive identifier associated with the specific process grouping.
Opening claim text (preview).
What is claimed is: 1. A method, comprising: executing digital clustering to automatically identify a plurality of processes identified as belonging to a specific process grouping among a plurality of process groupings, wherein: the plurality of processes are grouped into the same specific process grouping based on being a part of a same specific software application that is being executed by electronic circuitry of a computer, a different set of processes is grouped into a different process grouping in the plurality of process groupings based on being a part of another software application; after identifying the specific process grouping of the plurality of processes, identifying eligible token words in one or more parameters of the plurality of processes; processing the eligible token words to select a subset within the eligible token words that are likely descriptive of the specific software application, wherein processing the eligible token words includes: selecting among the eligible token words, at least one eligible token word for inclusion in the subset for the specific process grouping based on a measure of value on the at least one eligible token word being in the eligible token words for the specific process grouping with respect to a number count of other process groupings that includes the at least one eligible token word; utilizing the selected subset within the eligible token words to automatically determine a plurality of descriptive identifier words describing and differentiating the specific software application among other software applications of the plurality of process groupings; and using the plurality of descriptive identifier words of the specific software application in automatically discovering and managing the specific software application. 2. The method of claim 1 , wherein the one or more parameters include at least one of the following: a command that starts software process execution, a parameter that specifies software process configuration upon execution, a software process name, or a software process file location path. 3. The method of claim 1 , wherein the digital clustering includes density-based spatial clustering of applications with noise. 4. The method of claim 1 , wherein identifying the eligible token words includes extracting eligible text strings from the one or more parameters. 5. The method of claim 4 , wherein extracting the eligible text strings includes identifying sequences of text characters bounded by one or more specified delimiting text characters. 6. The method of claim 1 , wherein identifying the eligible token words includes comparing words in the one or more parameters against a list of ineligible token words. 7. The method of claim 1 , wherein processing the eligible token words includes performing at least one of the following: converting uppercase characters of the eligible token words to lowercase versions, removing numerical characters from the eligible token words, or removing non-alphabetic characters from the eligible token words. 8. The method of claim 1 , wherein processing the eligible token words includes calculating a word frequency metric for each of the eligible token words and using the calculated word frequency metrics to identify at least a portion of the eligible token words as high frequency eligible token words. 9. The method of claim 1 , wherein processing the eligible token words includes converting grammatical variants of the eligible token words to corresponding root forms. 10. The method of claim 1 , wherein the plurality of descriptive identifier words include a plurality of words in a file system location path. 11. The method of claim 1 , wherein the plurality of descriptive identifier words is a combination of a process name associated with the specific process grouping and one or more words within the selected subset. 12. The method of claim 1 , further comprising providing a user with an option to modify the determined plurality of descriptive identifier words. 13. The method of claim 1 , further comprising storing in a configuration management database (CMDB) the plurality of descriptive identifier words as an identifier of the specific process grouping. 14. A system, comprising: one or more processors configured to: execute digital clustering to automatically identify a plurality of processes identified as belonging to a specific process grouping among a plurality of process groupings, wherein: the plurality of processes are grouped into the same specific process grouping based on belonging to being a part of a same specific software application that is being executed by electronic circuitry of a computer, a different set of processes is grouped into a different process grouping in the plurality of process groupings based on being a part of another software application; after identifying the specific process grouping of the plurality of processes, identify eligible token words in one or more parameters of the plurality of processes; process the eligible token words to select a subset within the eligible token words that are likely descriptive of the specific process grouping, wherein the one or more processors are configured to process the eligible token words including by being configured to: select among the eligible token words, at least one eligible token word for inclusion in the subset for the specific process grouping based on a measure of value on the at least one eligible token word being in the eligible token words for the specific process grouping with respect to a number count of other process groupings that includes the at least one eligible token word; utilize the selected subset within the eligible token words to automatically determine a plurality of descriptive identifier words describing and differentiating the specific software application among other software applications of the plurality of process groupings; and use the plurality of descriptive identifier words of the specific software application in automatically discovering and managing the specific software application; and a memory coupled with at least one of the one or more processors and configured to provide the one or more processors with instructions. 15. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for: executing digital clustering to automatically identify a plurality of processes identified as belonging to a specific process grouping among a plurality of process groupings, wherein: the plurality of processes are grouped into the same specific process grouping based on being a part of a same specific software application that is being executed by electronic circuitry of a computer, a different set of processes is grouped into a different process grouping in the plurality of process groupings based on being a part of another software application; after identifying the specific process grouping of the plurality of processes, identifying eligible token words in one or more parameters of the plurality of processes; processing the eligible token words to select a subset within the eligible token words that are likely descriptive of the specific software application, wherein processing the eligible token words includes: selecting among the eligible token words, at least one eligible token word for inclusion in the subset for the specific process grouping based on a measure of value on the at least one eligible token word being in the eligible token words for the specific process grouping with respect to a number count
Procedures used during a speech recognition process, e.g. man-machine dialogue · CPC title
Audio in a user interface, e.g. using voice commands for navigating, audio feedback · CPC title
Lexical analysis, e.g. tokenisation or collocates · CPC title
Speech to text systems (G10L15/08 takes precedence) · CPC title
Distributed recognition, e.g. in client-server systems, for mobile phones or network applications · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.