- Patent Title: Detection of malicious intent in privileged identity environments
-
Application No.: US15791509Application Date: 2017-10-24
-
Publication No.: US10685107B2Publication Date: 2020-06-16
- Inventor: Trevor S. Norvill , Codur S. Pranam , Rohit U. Satyanarayana , Suhas Venkatesh Kashyap
- Applicant: International Business Machines Corporation
- Applicant Address: US NY Armonk
- Assignee: International Business Machines Corporation
- Current Assignee: International Business Machines Corporation
- Current Assignee Address: US NY Armonk
- Agent Aaron N. Pontikos
- Main IPC: G06F21/55
- IPC: G06F21/55 ; H04L29/06 ; G06F21/31 ; G06F21/56

Abstract:
A computer-implemented method includes receiving a request to authenticate a user to remotely access a secure device and establishing, in response to the user being granted remote access to the secure device, a remote user session for the user. The computer-implemented method further includes identifying a plurality of actions performed during the remote user session. The computer-implemented method further includes comparing a first combination of actions in the plurality of actions to a plurality of policies for malicious intent. The computer-implemented method further includes determining a level of risk for malicious intent for the first combination of actions. The computer-implemented method further includes generating, in response to the level of risk of the first combination of actions exceeding a given threshold level, one or more preventive actions. A corresponding computer system and computer program product are also disclosed.
Public/Granted literature
- US20190121972A1 DETECTION OF MALICIOUS INTENT IN PRIVILEGED IDENTITY ENVIRONMENTS Public/Granted day:2019-04-25
Information query