Cheng Cao resumes & CV records
Resumes
Cheng Cao
Skills:
C, R, Machine Learning, Algorithms
Cheng Y Cao, 68Metuchen, NJ
Cheng Cao Phones & Addresses
Metuchen, NJ
Newark, NJ
Mentions for Cheng Y Cao
Publications & IP owners
Us Patents
Behavior-Based Host Modeling
US Patent:
2018018, Jun 28, 2018
Filed:
Feb 22, 2018
Appl. No.:
15/902369
Inventors:
- Princeton NJ, US
LuAn Tang - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Cheng Cao - Bellevue WA, US
LuAn Tang - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Cheng Cao - Bellevue WA, US
International Classification:
H04L 12/24
H04L 29/06
G06F 17/18
H04L 29/06
G06F 17/18
Abstract:
Methods and systems for modeling host behavior in a network include determining a first probability function for observing each of a set of process-level events at a first host based on embedding vectors for the first event and the first host. A second probability function is determined for the first host issuing each of a set of network-level events connecting to a second host based on embedding vectors for the first host and the second host. The first and second probability functions are maximized to determine a set of likely process-level and network-level events for the first host. A security action is performed based on the modeled host behavior.
Behavior-Based Community Detection In Enterprise Information Networks
US Patent:
2018018, Jun 28, 2018
Filed:
Feb 22, 2018
Appl. No.:
15/902432
Inventors:
- Princeton NJ, US
LuAn Tang - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Cheng Cao - Bellevue WA, US
LuAn Tang - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Cheng Cao - Bellevue WA, US
International Classification:
H04L 12/24
G06F 21/55
H04L 12/26
H04L 29/06
G06F 21/55
H04L 12/26
H04L 29/06
Abstract:
Methods and systems for detecting host community include modeling a target host's behavior based on historical events recorded at the target host. One or more original peer hosts having behavior similar to the target host's behavior are found by determining a distance in a latent space that embeds the historical events between events of the target host and events of the one or more original peer hosts. A security management action is performed based on behavior of the target host and the determined one or more original peer hosts.
Peer-Based Abnormal Host Detection For Enterprise Security Systems
US Patent:
2018018, Jun 28, 2018
Filed:
Feb 22, 2018
Appl. No.:
15/902318
Inventors:
- Princeton NJ, US
LuAn Tang - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Cheng Cao - Bellevue WA, US
LuAn Tang - Pennington NJ, US
Zhichun Li - Princeton NJ, US
Cheng Cao - Bellevue WA, US
International Classification:
H04L 29/06
Abstract:
Systems and methods for determining a risk level of a host in a network include modeling a target host's behavior based on historical events recorded at the target host. One or more original peer hosts having behavior similar to the target host's behavior are determined. An anomaly score for the target host is determined based on how the target host's behavior changes relative to behavior of the one or more original peer hosts over time. A security management action is performed based on the anomaly score.
Possible Relatives
NOTICE: You may not use BackgroundCheck or the information it provides to make decisions about employment, credit, housing or any other purpose that would require Fair Credit Reporting Act (FCRA) compliance. BackgroundCheck is not a Consumer Reporting Agency (CRA) as defined by the FCRA and does not provide consumer reports.