公开(公告)号：US20240281352A1

公开(公告)日：2024-08-22

申请号：US18110456

申请日：2023-02-16

Applicant: CrowdStrike, Inc.

Inventor： Andrew Southgate

IPC: G06F11/30 ,  G06F11/32

CPC classification number: G06F11/3065 ,  G06F11/327

Abstract: An artificial intelligence (AI) monitoring service detects, in real time or in near real time, misbehaving AI. The AI monitoring service monitors any of inputs to the AI, incoming/outgoing communications, API calls, inter-service/inter-container activities associated with the AI, and/or an output generated by the AI. Any activity conducted by, or associated with, the AI may be compared to an AI behavior profile defining permissible/impermissible activities. If any activity fails to conform to the AI behavior profile, alerts are sent and threat procedures are implemented. Very early stages of abnormal AI behavior are detected, thus quickly exposing abnormal AI behavior before the artificial intelligence can implement undesirable, or even harmful, actions.

公开(公告)号：US20240146734A1

公开(公告)日：2024-05-02

申请号：US18478006

申请日：2023-09-29

Applicant: CrowdStrike, Inc.

Inventor： Andrew Southgate ,  Paul Sumedrea ,  Cristian Viorel Popa ,  Dragos Georgian Corlatescu

IPC: H04L9/40 ,  G06F21/62 ,  G06N5/02

CPC classification number: H04L63/10 ,  G06F21/6227 ,  G06N5/02 ,  H04L63/08

Abstract: Systems and methods of authentication utilizing a large language model (LLM) are provided. The method includes accessing a knowledge base comprising user-specific data of a user device associated with a domain. In response to a request from the user device for access to a resource of the domain, the method includes generating one or more authentication challenges based on the user-specific data. The one or more authentication challenges are generated by an LLM trained on the user-specific data and contextual interactions associated with the user device. In response to determining that a response to the one or more authentication challenges matches the user-specific data of the knowledge base and the contextual interactions, the method includes providing the user device access to the resource of the domain.

公开(公告)号：US20250007926A1

公开(公告)日：2025-01-02

申请号：US18477241

申请日：2023-09-28

Applicant: CrowdStrike, Inc.

Inventor： Andrew Southgate ,  Paul Sumedrea ,  Stefan-Bogdan Cocea ,  Dragos Georgian Corlatescu

IPC: H04L9/40 ,  H04L41/16

Abstract: Systems and methods of actor attribution utilizing a machine learning (ML) model, such as a large language model (LLM), are provided. The method includes generating a first ML model based on first data associated with a first cybersecurity incident of a plurality of cybersecurity incidents. The method includes training the first ML model based on actor attribution associated with the first cybersecurity incident to generate a second ML model. The method includes receiving second data that is associated with a second cybersecurity incident of the plurality of cybersecurity incidents. The method includes producing, by a processing device for the second ML model using the second data, an attribution of the second cybersecurity incident to an actor.