ERIC BRUCE ROBERTSON
Pilots at Ware St, Vienna, VA
License number
Virginia A4871638
Issued Date
Sep 2015
Expiration Date
Sep 2016
Category
Airmen
Type
Authorized Aircraft Instructor
Address
Address
1001 Ware St SW, Vienna, VA 22180
Professional information
Intrusion Event Correlation System
US Patent:
8181252, May 15, 2012
Filed:
Apr 12, 2010
Appl. No.:
12/758135
Inventors:
Sushil Jajodia - Oakton VA, US
Steven E Noel - Dale City VA, US
Eric B Robertson - Vienna VA, US
Steven E Noel - Dale City VA, US
Eric B Robertson - Vienna VA, US
Assignee:
George Mason Intellectual Properties, Inc. - Fairfax VA
International Classification:
H04L 29/06
US Classification:
726 25, 726 22, 726 23, 726 24, 709223, 709224
Abstract:
Disclosed is a system for correlating intrusion events using attack graph distances. The system includes an attack graph generator, an exploit distance calculator, an intrusion detector, an event report/exploit associator, an event graph creator, an event graph distance calculator, a correlation value calculator, and a coordinated attack analyzer. An attack graph is constructed for exploits and conditions in a network. The exploit distance calculator determines exploit distances for exploit pair(s). The intrusion detector generates event. Events are associated with exploits. Event graph distances are calculated. Correlation values are calculated for event pair(s) using event graph distances. The correlation values are analyzed using a correlation threshold to detect coordinated attacks.
Network Attack Modeling, Analysis, And Response
US Patent:
7904962, Mar 8, 2011
Filed:
Mar 10, 2006
Appl. No.:
11/371937
Inventors:
Sushil Jajodia - Oakton VA, US
Steven E. Noel - Dale City VA, US
Pramod Kalapa - Vienna VA, US
Brian C. O'Berry - North Potomac MD, US
Michael A. Jacobs - Tulsa OK, US
Eric B. Robertson - Vienna VA, US
Robert G. Weierbach - Arlington VA, US
Steven E. Noel - Dale City VA, US
Pramod Kalapa - Vienna VA, US
Brian C. O'Berry - North Potomac MD, US
Michael A. Jacobs - Tulsa OK, US
Eric B. Robertson - Vienna VA, US
Robert G. Weierbach - Arlington VA, US
Assignee:
George Mason Intellectual Properties, Inc. - Fairfax VA
International Classification:
G06F 12/14, G06F 12/16
US Classification:
726 25, 726 22, 726 23, 726 24, 709223, 709224
Abstract:
Disclosed is a system for modeling, analyzing, and responding to network attacks. Machines are mapped to components, components are mapped to vulnerabilities, and vulnerabilities are mapped to exploits. Each of the exploits includes at least one precondition mapped to at least one postcondition. An attack graph which defines inter-exploit distances is generated using at least one of the exploits. The attack graph is aggregated. At least one hardening option is determined using the aggregated attack graph. Hardening options include applying at least one corrective measure to at least one initial condition, where the initial condition is the initial state of a precondition.
Intrusion Event Correlation System
US Patent:
2012022, Sep 6, 2012
Filed:
May 8, 2012
Appl. No.:
13/466706
Inventors:
Steven E. Noel - Dale City VA, US
Eric B. Robertson - Vienna VA, US
Sushil Jajodia - Oakton VA, US
Eric B. Robertson - Vienna VA, US
Sushil Jajodia - Oakton VA, US
International Classification:
G06F 21/00
US Classification:
726 23
Abstract:
Disclosed is a system for correlating intrusion events using attack graph distances. The system includes an attack graph generator, an exploit distance calculator, an intrusion detector, an event report/exploit associator, an event graph creator, an event graph distance calculator, a correlation value calculator, and a coordinated attack analyzer. An attack graph is constructed for exploits and conditions in a network. The exploit distance calculator determines exploit distances for exploit pair(s). The intrusion detector generates event. Events are associated with exploits. Event graph distances are calculated. Correlation values are calculated for event pair(s) using event graph distances. The correlation values are analyzed using a correlation threshold to detect coordinated attacks.
Intrusion Event Correlator
US Patent:
7735141, Jun 8, 2010
Filed:
Mar 10, 2006
Appl. No.:
11/371938
Inventors:
Steven E. Noel - Woodbridge VA, US
Eric B. Robertson - Vienna VA, US
Eric B. Robertson - Vienna VA, US
International Classification:
G06F 11/00, G06F 12/14, G06F 12/16, G06F 23/00
US Classification:
726 25, 726 22, 726 23, 726 24, 709223, 709224
Abstract:
Disclosed is a system for correlating intrusion events using attack graph distances. The system includes an attack graph generator, an exploit distance calculator, an intrusion detector, an event report/exploit associator, an event graph creator, an event graph distance calculator, a correlation value calculator, and a coordinated attack analyzer. An attack graph is constructed for exploits and conditions in a network. The exploit distance calculator determines exploit distances for exploit pair(s). The intrusion detector generates event. Events are associated with exploits. Event graph distances are calculated. Correlation values are calculated for event pair(s) using event graph distances. The correlation values are analyzed using a correlation threshold to detect coordinated attacks.