/Patent Tracker
GoogleGranted patentSecurity & privacyInterest 4/10

Google patents system that auto-creates rules to catch computer intrusions

Google has been granted a patent for a security framework that automatically turns data about past cyberattacks into new detection rules. The system uses specific policies to transform raw attack data into formats that a security platform can use to identify and block future threats.

Why it mattersThis improves how companies maintain their cybersecurity defenses by automating the creation of detection rules from historical data, reducing the manual work required to update security systems.

In the filing’s own words

A plurality of data sets characterizing prior intrusive activities with respect to computing resources associated with one or more entities are received at a security platform. One or more rule generation policies each pertaining to at least one type of intrusive activity are received at a security platform. The one or more rule generation policies are applied to the plurality of data sets characterizing the prior intrusive activities to generate a plurality of intrusive activity detection rules. The plurality of intrusive activity detection rules are caused to be used to detect subsequent intrusive activities.

What exactly they claim (claim 1)

1. A method comprising: receiving, at a security platform, a plurality of data sets characterizing prior intrusive activities with respect to computing resources associated with one or more entities; receiving, at the security platform, one or more rule generation policies each pertaining to one or more respective transformations of one or more data sets into one or more intrusive activity detection rules, wherein the one or more rule generation policies are associated with a plurality of transformation types supported by the security platform, and wherein at least one of the one or more rule generation policies defines a mapping that translates one or more of the one or more data sets in one or more first formats to one or more of the intrusive activity detection rules in one or more second formats supported by the security platform; applying the one or more rule generation policies to the plurality of data sets characterizing the prior intrusive activities to generate a plurality of intrusive activity detection rules in the one or more second formats supported by the security platform; and causing the plurality of intrusive activity detection rules to be used to detect subsequent intrusive activities.

Facts

Company
Google (Google LLC)
Official title
Framework for automated data-driven detection engineering
Patent number
US12750405B2
Application number
18133460
Filed
Apr 11, 2023
Granted
Sep 29, 2026
Inventors
12
Claims
20

Classified under

H04L 63/20 Electricity & electronicsH04L 63/1425 Electricity & electronics
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Google in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.