US20220012336 BLOCK-BASED ANOMALY DETECTION

Settings

Stemming

Single Family Member

Include NPL

Feedback

Goto Application

Office

United States of America

Application Number 16925461

Application Date 10.07.2020

Publication Number 20220012336

Publication Date 13.01.2022

Publication Kind A1

IPC

CPC

View more classifications

View less classifications

Applicants International Business Machines Corporation

Inventors Abdul Kareem Lakkundi
Siddalinga Aradhya
Santosh Kulkarni

Title

(EN) BLOCK-BASED ANOMALY DETECTION

Abstract

(EN)

A plurality of blocks of a first storage device are monitored. The first storage device is related to a computer system. A subset of blocks of the plurality a compared to a first storage signature of the first storage device. Based on the comparing of the subset of blocks to the first storage signature, a security anomaly is determined on the computer system. In response to the security anomaly, a security action is performed. The security action is related to the computer system.

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
F	ELECTRIC DIGITAL DATA PROCESSING
21	Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50	Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
55	Detecting local intrusion or implementing counter-measures
56	Computer malware detection or handling, e.g. anti-virus arrangements

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
N	COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
5	Computer systems using knowledge-based models
04	Inference methods or devices

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
N	COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
20	Machine learning

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
F	ELECTRIC DIGITAL DATA PROCESSING
21	Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50	Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
55	Detecting local intrusion or implementing counter-measures
56	Computer malware detection or handling, e.g. anti-virus arrangements

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
N	COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
5	Computer systems using knowledge-based models
04	Inference methods or devices

Processing

National Phase Entries

Authority File

Settings

Feedback

Goto Application

1. US20220012336 - BLOCK-BASED ANOMALY DETECTION

G	PHYSICS
06	COMPUTING; CALCULATING; COUNTING
F	ELECTRIC DIGITAL DATA PROCESSING
21	Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50	Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
55	Detecting local intrusion or implementing counter-measures
56	Computer malware detection or handling, e.g. anti-virus arrangements
561	Virus type analysis