Fortinet Patent Applications

Machine Learning Systems and Methods for API Discovery and Protection by URL Clustering With Schema Awareness

Granted: February 2, 2023
Application Number: 20230034914
Various embodiments provide systems and methods for discovering APIs for use in relation to network application security.

CLOUD-BASED ORCHESTRATION OF INCIDENT RESPONSE USING MULTI-FEED SECURITY EVENT CLASSIFICATIONS

Granted: February 2, 2023
Application Number: 20230034035
Systems and methods for performing multi-feed classification of security events to facilitate automated IR orchestration are provided. According to one embodiment a cloud-based security service protecting a private network provides a plurality of data feeds, wherein each data feed of the plurality of data feeds independently classify a given security event and produce a classification result. In response to an event associated with a process of an endpoint device that is part of the…

Machine Learning Systems and Methods for API Discovery and Protection by URL Clustering With Schema Awareness

Granted: February 2, 2023
Application Number: 20230034914
Various embodiments provide systems and methods for discovering APIs for use in relation to network application security.

CLOUD-BASED ORCHESTRATION OF INCIDENT RESPONSE USING MULTI-FEED SECURITY EVENT CLASSIFICATIONS

Granted: February 2, 2023
Application Number: 20230034035
Systems and methods for performing multi-feed classification of security events to facilitate automated IR orchestration are provided. According to one embodiment a cloud-based security service protecting a private network provides a plurality of data feeds, wherein each data feed of the plurality of data feeds independently classify a given security event and produce a classification result. In response to an event associated with a process of an endpoint device that is part of the…

Machine Learning Systems and Methods for API Discovery and Protection by URL Clustering With Schema Awareness

Granted: February 2, 2023
Application Number: 20230034914
Various embodiments provide systems and methods for discovering APIs for use in relation to network application security.

CLOUD-BASED ORCHESTRATION OF INCIDENT RESPONSE USING MULTI-FEED SECURITY EVENT CLASSIFICATIONS

Granted: February 2, 2023
Application Number: 20230034035
Systems and methods for performing multi-feed classification of security events to facilitate automated IR orchestration are provided. According to one embodiment a cloud-based security service protecting a private network provides a plurality of data feeds, wherein each data feed of the plurality of data feeds independently classify a given security event and produce a classification result. In response to an event associated with a process of an endpoint device that is part of the…

Machine Learning Systems and Methods For Dual Network Multi-Class Classification

Granted: December 15, 2022
Application Number: 20220398494
Among a great deal of other disclosure and scope, systems and methods are disclosed in relation to a dual network entity designed for classification in problem spaces where the target can be one of multiple possibilities with as few labeled training examples as possible. In one of many possible implementations, a network is first used to identify vectors considered to possess immense amounts of information regarding the problem space. An oracle is then tasked with labeling such vectors.…

SYSTEMS AND METHODS FOR RESILIENT ZTNA MICRO-SEGMENTATION POLICY GENERATION

Granted: December 15, 2022
Application Number: 20220400116
Systems, devices, and methods are discussed for determining zero trust network access policy based upon intent defined groups of workloads.

SYSTEMS AND METHODS FOR FINE GRAINED FORWARD TESTING FOR A ZTNA ENVIRONMENT

Granted: December 15, 2022
Application Number: 20220400114
Systems, devices, and methods are discussed for forward testing rule sets at a granularity that is less than all activity on the network. In some cases, the granularity is that of an individual application.

SYSTEMS AND METHODS FOR FOCUSED LEARNING OF APPLICATION STRUCTURE AND ZTNA POLICY GENERATION

Granted: December 15, 2022
Application Number: 20220400113
Systems, devices, and methods are discussed for determining zero trust network access policy from a policy from a perspective focused on one or more network elements.

Machine Learning Systems and Methods For Exponentially Scaled Regression for Spatial Based Model Emphasis

Granted: December 15, 2022
Application Number: 20220398493
Among a great deal of other disclosure and scope, systems and methods are disclosed in relation to training regression machine learning models. In one of many possible implementations, a region of particular interest is identified where it is important for the target model to be very accurate within the region even at the expense of accuracy outside the region. The operator then tunes the loss function hyperparameters in order to correctly fit the region of interest and importance…

Machine Learning Systems and Methods for Classification Based Auto-Annotation

Granted: December 15, 2022
Application Number: 20220398491
Among a great deal of other disclosure and scope, systems and methods are enclosed that enable automated labelling of a subset of vectors in a given problem space. For example, in some of many cases, a first machine learning model pre-trained on a given problem space makes predictions regarding fresh, unseen data. In addition to this prediction, the model can output a confidence metric indicating its confidence regarding the prediction made. A subset of these vectors with the highest…

Machine Learning Systems and Methods for Using an Orthogonality Heuristic to Identify an Ignored Labeling Target

Granted: December 15, 2022
Application Number: 20220398453
Among a great deal of other disclosure and scope, systems and methods are enclosed that enable efficient assessment of the currently known manifolds within a problem space. A set of labeled vectors is identified as well as a set of unlabeled vectors. An angular based comparison is made between each unlabeled vector and each labeled vector. If the smallest angle between a given unlabeled vector and any of the labeled vectors is deemed satisfactory, such as when the angle is small and…

Machine Learning Systems and Methods for Regression Based Active Learning

Granted: December 15, 2022
Application Number: 20220398449
Among a great deal of other disclosure and scope, systems and methods are enclosed that enable for highly efficient labeling of data. For example, in some of many cases, a novel methodology for ranking vectors most useful to label next is disclosed. In such an example, a neural network is trained to predict this ranking methodology upon being given a set of heuristics from which to assess the given problem space. A user can continue the cycle of identifying a set of candidate vectors to…

Machine Learning Systems and Methods for Using Perturbation to Identify High Value Vector Labeling Targets

Granted: December 15, 2022
Application Number: 20220398436
Among a great deal of other disclosure and scope, systems and methods are enclosed that adapt adversarial learning principles to an active learning regime. Given a problem space of note, a set of labeled vectors, a machine learning model trained on the set of labeled vectors, and a set of unlabeled vectors, we identify the unlabeled vectors our model is most unsure of. Each of our unlabeled vectors in our set of unlabeled vectors is initially classified by our model, and the prediction…

Systems and Methods for Facial Recognition Training Dataset Adaptation with Limited User Feedback in Surveillance Systems

Granted: November 24, 2022
Application Number: 20220374656
Various embodiments provide systems and methods for updating a training dataset so that the generated machine learning model can adapt to both short-term and long-term face variations including, for example, head pose, dressing, lighting conditions, and/or aging.

Systems and Methods for Hierarchical Facial Image Clustering

Granted: November 24, 2022
Application Number: 20220374627
Various systems and methods for clustering facial images in, for example, surveillance systems.

DETERMINATION OF A SECURITY RATING OF A NETWORK ELEMENT

Granted: November 17, 2022
Application Number: 20220368719
Systems and methods for a security rating framework that translates compliance requirements to corresponding desired technical configurations to facilitate generation of security ratings for network elements is provided. According to one embodiment, a host network element executes a collection of security checks on at least a first network element. The execution is performed by receiving configuration data of the first network element pertaining to each security check of the collection…

SYSTEMS AND METHODS FOR INCORPORATING AUTOMATED REMEDIATION INTO INFORMATION TECHNOLOGY INCIDENT SOLUTIONS

Granted: November 17, 2022
Application Number: 20220368587
Various approaches for providing network maintenance and health monitoring. In some cases, some approaches include systems, methods, and/or devices that provide for receiving and cataloging network incidents and invoking automated remediation in relation to network incidents.

SYSTEMS AND METHODS FOR SCALABLE ZERO TRUST SECURITY PROCESSING

Granted: October 27, 2022
Application Number: 20220345491
Various approaches for providing scalable network access processing. In some cases, approaches discussed relate to systems and methods for providing scalable zero trust network access control.