Systems and methods for precomputation of digital asset inventories

Patent metadata

Field	Value
Publication number	US-12425437-B2
Application number	US-202217945337-A
Country	US
Kind code	B2
Filing date	Sep 15, 2022
Priority date	Sep 17, 2021
Publication date	Sep 23, 2025
Grant date	Sep 23, 2025

Abstract

Methods and supporting systems for discovering and attributing computational assets to respective entities includes receiving datasets comprising source record data for numerous of entities and including attributes such as point of contact data elements and normalizing the data elements to maintain a consistent format across the source record data. A filter is applied against the normalized source record data to identify data that are either (i) redundant or (ii) refer to a bulk control entity. A further curation step can be applied against the data as the data is stored as a bipartite graph, wherein a first set of nodes of the bipartite graph represents source records and a second set of nodes represents attributes of the source records.

First claim

What is claimed is:

1. A computer-implemented method of discovering and attributing computational assets to respective entities, the method comprising:
receiving a dataset comprising source record data for a plurality of entities, the source record data comprising a plurality of source records and a plurality of attributes associated with the source records;
applying a blocklist filter of domains against the source record data to identify and remove a first subset of the source record data that refers to a bulk control entity;
performing a human curation step against the source record data to curate the source record data, thereby removing or revising one or more of the source records in the source record data;
storing the curated and filtered dataset in a persistent data storage device as a bipartite graph, wherein a first set of nodes of the bipartite graph represents the source records, a second set of nodes represents the attributes associated with the source records, and edges connecting nodes in the first set and second set represent source records and attributes associated with a common entity; and
querying the stored dataset to identify the attributes of the source record data associated with the common entity based on a common associated source record of the source records.

2. The method of claim 1 , wherein the source record data comprises data collected from one or more of registry datasets, website data, certificate registries, and DNS datasets.

3. The method of claim 1 , wherein the attributes associated with the source records comprise point of contact data elements.

4. The method of claim 3 , wherein the point of contact data elements comprise one or more of a phone number and an email address.

5. The method of claim 4 , wherein at least a subset of the point of contact data elements are further associated with an individual.

6. The method of claim 1 , further comprising normalizing one or more of the attributes associated with the source records such that the normalized attributes maintain a consistent format across the source record data.

7. The method of claim 1 , wherein the application of the blocklist filter identifies and removes a second subset of the source record data that is redundant.

8. The method of claim 1 , wherein the bulk control entity controls domain registrations on behalf of another entity.

9. The method of claim 7 , wherein the source record data further comprises domain registrations, and further comprising identifying and removing a subset of the domain registrations from the source record data that appear at a frequency above a threshold.

10. The method of claim 9 , further comprising associating a reason code with such identified domain registrations.

11. The method of claim 1 , further comprising augmenting a relationship between the source records and the attributes associated with the source records with a datestamp value representing a date the relationship was first identified.

12. A system for discovering and attributing computational assets to respective entities, the system comprising:
one or more computer systems each comprising one or more processors and a memory, the one or more computer systems being programmed to perform operations comprising:
receiving a dataset comprising source record data for a plurality of entities, the source record data comprising a plurality of source records and a plurality of attributes associated with the source records;
applying a blocklist filter of domains against the source record data to identify and remove a first subset of the source record data that refers to a bulk control entity;
performing a human curation step against the source record data to curate the source record data, thereby removing or revising one or more of the source records in the source record data;
storing the curated and filtered dataset in a persistent data storage device as a bipartite graph, wherein a first set of nodes of the bipartite graph represents the source records, a second set of nodes represents the attributes associated with the source records, and edges connecting nodes in the first set and second set represent source records and attributes associated with a common entity; and
querying the stored dataset to identify the attributes of the source record data associated with the common entity based on a common associated source record of the source records.

13. The system of claim 12 , wherein the source record data comprises data collected from one or more of registry datasets, website data, certificate registries and DNS datasets.

14. The system of claim 12 , wherein the attributes associated with the source record data comprise point of contact data elements.

15. The system of claim 14 , wherein the point of contact data elements comprise one or more of phone numbers and email addresses.

16. The system of claim 13 , wherein at least a subset of the point of contact data elements are further associated with an individual.

17. The system of claim 12 , wherein the one or more computer systems are further programmed to perform operations comprising normalizing one or more of the attributes associated with the source records such that the normalized attributes maintain a consistent format across the source record data.

18. The system of claim 12 , wherein the application of the blocklist filter identifies and removes a second subset of the source record data that is redundant.

19. The system of claim 18 , wherein the bulk control entity controls domain registrations on behalf of another entity.

20. The system of claim 18 , wherein the source record data further comprises domain registrations, and wherein the one or more computer systems are further programmed to perform operations comprising identifying and removing a subset of the domain registrations from the source record data that appear at a frequency above a threshold.

21. The system of claim 18 , wherein the one or more computer systems are further programmed to perform operations comprising associating a reason code with such identified domain registrations.

22. The system of claim 12 , wherein the one or more computer systems are further programmed to perform operations comprising augmenting a relationship between the source records and the attributes related to the source records with a datestamp value representing a date the relationship was first identified.

Assignees

• Bitsight Tech Inc

Inventors

• Dahlberg Daniel
• Allshouse Austin Payne

Classifications

• G06F16/9024

  Graphs; Linked lists (G06F16/9027 takes precedence) · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• G06F2221/034

  Test or assess a computer or a system · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title