US 11,722,510 B2
Monitoring and preventing remote user automated cyber attacks
Patrick Lewis, Denver, NC (US)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Aug. 10, 2020, as Appl. No. 16/988,863.
Prior Publication US 2022/0046047 A1, Feb. 10, 2022
Int. Cl. H04L 9/40 (2022.01); G06F 21/55 (2013.01); G06N 20/00 (2019.01); G06F 9/455 (2018.01); G06F 18/214 (2023.01)
CPC H04L 63/1433 (2013.01) [G06F 9/45558 (2013.01); G06F 18/214 (2023.01); G06N 20/00 (2019.01); H04L 63/1416 (2013.01); H04L 63/1441 (2013.01); H04L 63/20 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
monitor data associated with a series of activities from a virtual desktop accessed by a remote computing device;
detect new activity data on the virtual desktop accessed by the remote computing device;
evaluate the new activity data relative to the data associated with the series of activities, wherein evaluating includes applying a machine learning model to the new activity data;
determine if the new activity data is indicative of a potential cyber-attack based on evaluating the new activity data relative to the data associated with series of activities; and
in response to determining that the new activity data is indicative of a potential cyber-attack, initiate one or more security response actions, wherein initiating the one or more security response actions includes transmitting a security response alert to a data loss prevention computing device, and wherein transmitting the security response alert causes a screen mirroring session of the remote computing device to initiate at a display of the data loss prevention computing device.