System for across rail silo system integration and logic repository

• US 10,721,246 B2
• Filed: 10/30/2017
• Issued: 07/21/2020
• Est. Priority Date: 10/30/2017
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Sims, Scott Anderson, Bell, Kolt Arthur, Carroll, Michael Joseph, Kim, Andrew Dongho, Piatetsky, Elliot, Schneeweis, Stephen M., Toth, Michael E., Widmann, Craig D., Satija, Dharmender Kumar, Alapati, Sai Kishan, Shah, Hitesh J.
• Primary Examiner(s): Zaidi, Syed A
• Application Number:
  US15/798,155
• Publication Number:
  US 20190132336A1
• Time in Patent Office: 995 Days
• Field of Search: 726 23
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

Systems, computer program products, and methods are described herein for the creation of an exposure identification and distribution system for across silo channel integration. In this way, the system allows team integration of data across rails and silos for exposure identification. As such, the system generates a centralized repository for data and a communication linkage across the various systems used for identifying exposure and manipulated for linkage via a specific taxonomy overlay. Furthermore the system also includes logic that, when identification of a potential exposure indicate occurs, the system may communicate via distribution over the rails for integration and sharing for cross entity exposure identification.

Claims

1. A system for across silo system integration, the system comprising:

a memory device with computer-readable program code stored thereon;

a communication device;

a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to;

identify one or more devices across an entity network, wherein the one or more devices are associated with exposure strategy users identifying exposure events within the entity;

generate a communication linkage with the one or more devices and a centralized repository for exposure event storage;

receive one or more exposure events from the one or more devices;

transmit information associated with the one or more exposure events to the centralized repository via selective connectivity communication linkage;

identify that the one or more exposure events does not reach a threshold level of a red-flag exposure event;

aggregate the transmitted information associated with the one or more exposure events received within the centralized repository across multiple categories of exposure events to identify a combination of exposure events indicating a potential intrusion, wherein the combination of exposure events include at least a portion of each of the one or more exposure events;

perform a taxonomy overlay of the aggregated one or more exposure events, wherein the taxonomy overlay identifies a combination of one or more exposure events across strategy teams within an entity to identify exposure of intrusion to the entity;

trigger a mitigation response from the entity as opposed to from each strategy team based on the combination of the exposure events reaching the threshold level of the red-flag exposure event; and

transmit via a secure single node strategy team communication the combination of one or more exposure events from the mitigation response while maintaining a fluid environment for centralized repository storage of the one or more exposure events with communication channels across an entity.

2. The system of claim 1, wherein generating a communication linkage with the one or more devices and a centralized repository for exposure event storage further comprises generating communication linkage with the one or more devices and maintain single node communication compatibility.

3. The system of claim 1, wherein receiving one or more exposure events from the one or more devices via the communication linkage further comprises integrating into applications on the one or more devices and extracting identified exposure events.

4. The system of claim 1, wherein the exposure events comprise one or more intrusions associated with a department within the entity, wherein the one or more intrusions include benign intrusions or require a mitigation response based on a review.

5. The system of claim 1, wherein the taxonomy overlay identifies a combination of one or more exposure events triggering a mitigation response further comprises combining one or more exposure events that are benign to generate a combination of multiple exposure events that trigger, in combination, the mitigation response requirement.

6. The system of claim 1, wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises communicating directly to specific devices associated with exposure strategy users for performing the mitigation response via a single node communication while maintaining the centralized repository and the communication linkage with the one or more devices across the entity.

7. The system of claim 1, wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises triggering logic communication to the device associated with the one or more exposure events identified in the combination.

8. A computer program product for across silo system integration, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:

an executable portion configured for identifying one or more devices across an entity network, wherein the one or more devices are associated with exposure strategy users identifying exposure events within the entity;

an executable portion configured for generating a communication linkage with the one or more devices and a centralized repository for exposure event storage;

an executable portion configured for receiving one or more exposure events from the one or more devices;

an executable portion configured for transmitting information associated with the one or more exposure events to the centralized repository via selective connectivity communication linkage;

an executable portion configured for identifying that the one or more exposure events does not reach a threshold level of a red-flag exposure event;

an executable portion configured for aggregating the transmitted information associated with the one or more exposure events received within the centralized repository across multiple categories of exposure events to identify a combination of exposure events indicating a potential intrusion, wherein the combination of exposure events include at least a portion of each of the one or more exposure events;

an executable portion configured for performing a taxonomy overlay of the aggregated one or more exposure events, wherein the taxonomy overlay identifies a combination of one or more exposure events across strategy teams within an entity to identify exposure of intrusion to the entity;

an executable portion configured for triggering a mitigation response from the entity as opposed to from each strategy team based on the combination of the exposure events reaching the threshold level of the red-flag exposure event; and

an executable portion configured for transmitting via a secure single node strategy team communication the combination of one or more exposure events from the mitigation response while maintaining a fluid environment for centralized repository storage of the one or more exposure events with communication channels across an entity.

9. The computer program product of claim 8, wherein generating a communication linkage with the one or more devices and a centralized repository for exposure event storage further comprises generating communication linkage with the one or more devices and maintain single node communication compatibility.

10. The computer program product of claim 8, wherein receiving one or more exposure events from the one or more devices via the communication linkage further comprises integrating into applications on the one or more devices and extracting identified exposure events.

11. The computer program product of claim 8, wherein the exposure events comprise one or more intrusions associated with a department within the entity, wherein the one or more intrusions include benign intrusions or require a mitigation response based on a review.

12. The computer program product of claim 8, wherein the taxonomy overlay identifies a combination of one or more exposure events triggering a mitigation response further comprises combining one or more exposure events that are benign to generate a combination of multiple exposure events that trigger, in combination, the mitigation response requirement.

13. The computer program product of claim 8, wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises communicating directly to specific devices associated with exposure strategy users for performing the mitigation response via a single node communication while maintaining the centralized repository and the communication linkage with the one or more devices across the entity.

14. The computer program product of claim 8, wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises triggering logic communication to the device associated with the one or more exposure events identified in the combination.

15. A computer-implemented method for across silo system integration, the method comprising:

providing a computing system comprising a computer processing device and a non-transitory computer readable medium, where the computer readable medium comprises configured computer program instruction code, such that when said instruction code is operated by said computer processing device, said computer processing device performs the following operations;

identifying one or more devices across an entity network, wherein the one or more devices are associated with exposure strategy users identifying exposure events within the entity;

generating a communication linkage with the one or more devices and a centralized repository for exposure event storage;

receiving one or more exposure events from the one or more devices;

transmitting information associated with the one or more exposure events to the centralized repository via selective connectivity communication linkage;

identifying that the one or more exposure events does not reach a threshold level of a red-flag exposure event;

aggregating the transmitted information associated with the one or more exposure events received within the centralized repository across multiple categories of exposure events to identify a combination of exposure events indicating a potential intrusion, wherein the combination of exposure events include at least a portion of each of the one or more exposure events;

performing a taxonomy overlay of the aggregated one or more exposure events, wherein the taxonomy overlay identifies a combination of one or more exposure events across strategy teams within an entity to identify exposure of intrusion to the entity;

triggering a mitigation response from the entity as opposed to from each strategy team based on the combination of the exposure events reaching the threshold level of the red-flag exposure event; and

transmitting via a secure single node strategy team communication the combination of one or more exposure events from the mitigation response while maintaining a fluid environment for centralized repository storage of the one or more exposure events with communication channels across an entity.

16. The computer-implemented method of claim 15, wherein generating a communication linkage with the one or more devices and a centralized repository for exposure event storage further comprises generating communication linkage with the one or more devices and maintain single node communication compatibility.

17. The computer-implemented method of claim 15, wherein receiving one or more exposure events from the one or more devices via the communication linkage further comprises integrating into applications on the one or more devices and extracting identified exposure events.

18. The computer-implemented method of claim 15, wherein the taxonomy overlay identifies a combination of one or more exposure events triggering a mitigation response further comprises combining one or more exposure events that are benign to generate a combination of multiple exposure events that trigger, in combination, the mitigation response requirement.

19. The computer-implemented method of claim 15, wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises communicating directly to specific devices associated with exposure strategy users for performing the mitigation response via a single node communication while maintaining the centralized repository and the communication linkage with the one or more devices across the entity.

20. The computer-implemented method of claim 15, wherein transmitting via single node communication the combination of one or more exposure events from the mitigation response further comprises triggering logic communication to the device associated with the one or more exposure events identified in the combination.