Eric D Knapp, 5323 Allen Hastings Way, Milton, NH 03851

2018036, Dec 20, 2018

Mar 22, 2018

15/928577

- Morris Plains NJ, US
- Amherst NH, US
Eric D. Knapp - Milton NH, US
Christopher W. Barr - Nashua NH, US
David Young - Stratham NH, US
Kevin McMurdie - Surprise AZ, US

G06F 21/31
G06F 21/44
G06F 21/45

A method includes detecting a connection attempt from a device, quarantining the device to prevent the device from substantially interacting with a host system, and determining whether the device requires verification while the device is quarantined. The method also includes, in response to determining that the device requires verification, presenting at least one authorization challenge to a user while the device is quarantined. The at least one authorization challenge requests that the user provide at least one specified response. The method further includes, in response to determining that the device requires verification, determining whether the user correctly provided the at least one specified response while the device is quarantined, granting access to the device in response to determining that the user correctly provided the at least one specified response, and continuing to quarantine the device in response to determining that the user did not correctly provide the at least one specified response.

2018031, Nov 1, 2018

Apr 28, 2017

15/582265

- Morris Plains NJ, US
Seth G. Carpenter - Phoenix AZ, US
Scott Woods - Cave Creek AZ, US
Eric D. Knapp - Milton NH, US

H04L 29/06
G06F 17/30

This disclosure provides an apparatus and method for a consolidated enterprise view of cybersecurity data from multiple sites, including but not limited to in industrial control systems and other systems. A method includes receiving, by a replicator system, cybersecurity data from a site risk manager (RM) database. The method includes transferring the cybersecurity data, by the replicator system, through a secure firewall to an enterprise RM database. The enterprise RM database consolidates data received from a plurality of replicator systems.

2018003, Feb 8, 2018

Aug 4, 2017

15/669417

- MORRIS PLAINS NJ, US
ERIC T. BOICE - PEORIA AZ, US
ERIC D. KNAPP - MILTON NH, US

G06F 21/60
H04L 29/06
H04L 9/32

A method of data transfer in a cyber-protected system includes inserting a removable media device into a removable media interface of a Secure Media Exchange (SMX) kiosk running a cyber-checking algorithm. The SMX kiosk includes a user interface, physical controls, input and output ports. An enclosure for physical protection prevents access to the physical controls, input and output ports configured with openings revealing the removable media interface and user interface. The cyber-checking algorithm inspects the removable media device for threats and adds encryption to the removable media device only if passing inspecting. The cyber-protected system includes networked devices coupled to communicate over a communications network including at least one SMX protected machine at a protected system node having a SMX algorithm and an encryption key. The SMX algorithm allows reading information from the removable media device on the SMX protected machine only if the encryption is confirmed.

2017020, Jul 20, 2017

Jan 19, 2016

15/001073

- Morris Plains NJ, US
Eric D. Knapp - Milton NH, US

H04L 29/06

This disclosure provides an apparatus and method for near-real-time export of cyber-security risk information, including but not limited to in industrial control systems and other systems. A method includes monitoring, by a risk manager system, a plurality of connected devices that are vulnerable to cyber-security risks. The method includes detecting a cyber-security risk to one or more of the devices being monitored. The method includes identifying an external system to be notified of the detected cyber-security risk. The method includes sending cyber-security risk data to the external system according to the detected cyber-security risk and at least one filtering option.

2017014, May 18, 2017

Nov 17, 2015

14/943876

- Morris Plains NJ, US
Eric D. Knapp - Milton NH, US

G06F 21/57

This disclosure provides an apparatus and method for deployment assurance checks for monitoring industrial control systems and other systems. A method includes identifying, by a risk manager system, a plurality of connected devices that are vulnerable to cyber-security risks. The method includes determining devices to be monitored from the plurality of connected devices. The method includes evaluating system resource usage, by the risk manager system, on each device to be monitored. The method includes providing recommendations to a user as to whether or not the user should proceed with the monitoring, based on the evaluation.

2016007, Mar 10, 2016

Sep 10, 2014

14/482888

- MORRISTOWN NJ, US
ERIC D. KNAPP - MILTON NH, US

G06F 21/57
H04L 29/06

A system and method for analyzing cyber-security risk inter-dependencies in a control system having networked devices. The system includes a central server that has a processor and a memory device in communication with the processor. The memory device stores inter-device dependencies and quantified individual risks for each of the networked devices. The memory device also stores a dynamic quantification of risk (DQR) program. The central server is programmed to implement the DQR program. Responsive to observed cyber behavior, the central server changes one or more of the quantified individual risks to generate at least one modified quantified individual risk. The inter-device dependencies for a first of the networked devices and the quantified individual risk for at least one other of the networked devices reflecting the modified quantified individual risk are used to dynamically modify the quantified individual risk for the first device to generate an inter-device modified quantified individual risk.

2016005, Feb 18, 2016

Mar 26, 2015

14/669980

- MORRISTOWN NJ, US
ERIC T. BOICE - PEORIA AZ, US
ANDREW KOWALCZYK - PHOENIX AZ, US
KEN DIETRICH - GLENDALE AZ, US
GANESH P. GADHE - PUNE, IN
ERIC D. KNAPP - MILTON NH, US

H04L 29/06
H04L 12/26

A method of analyzing cyber-security risks in an industrial control system (ICS) including a plurality of networked devices includes providing a processor and a memory storing a cyber-security algorithm. The processor runs the cyber-security algorithm and implements data collecting to compile security data including at least vulnerability data including cyber-risks (risks) regarding the plurality of networked devices by scanning the plurality of devices, processing the security data using a rules engine which associates a numerical score to each of the risks, aggregating data including ranking the risks across the plurality of networked devices and arranging the risks into at least one logical grouping, and displaying the logical grouping(s) on a user station.