US 12,463,998 B2
Security patch deployment in response to detecting malicious network traffic
Camilla Tyborowski, Buffalo Grove, IL (US); Adam Kristian King, Fort Mill, SC (US); Tarani Avasarala, Aurora, CO (US); Manil Ashish Trivedi, South Riding, VA (US); Robert Hannon Sparks, Euless, TX (US); Jose Miguel Magadan, III, St. Augustine, FL (US); Elizabeth Marie Bennett, Charlotte, NC (US); Sophia Brianna Bui, Charlotte, NC (US); and Rafael Josue Alfaro, Charlotte, NC (US)
Assigned to Bank of America Corporation, Charlotte, NC (US)
Filed by Bank of America Corporation, Charlotte, NC (US)
Filed on Jun. 22, 2023, as Appl. No. 18/339,852.
Prior Publication US 2024/0430278 A1, Dec. 26, 2024
Int. Cl. G06F 21/00 (2013.01); H04L 9/40 (2022.01); H04L 41/16 (2022.01)
CPC H04L 63/1425 (2013.01) [H04L 41/16 (2013.01); H04L 63/02 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for detecting and addressing security threats, comprising:
a memory configured to store a plurality of anomaly data comprising first anomaly data associated with a first malicious network traffic, wherein:
the first anomaly data is further associated with a first security patch, and
the first anomaly data indicates a first set of anomalies caused by the first malicious network traffic; and
a processor operably coupled with the memory, and configured to:
detect incoming network traffic to a computing device;
detect at least one of physical or digital effects of the incoming network traffic on the computing device;
determine that the incoming network traffic is causing a second set of anomalies based at least in part upon the at least one of detected physical or digital effects;
compare each of the second set of anomalies with a counterpart anomaly from among the first set of anomalies;
determine that more than a threshold percentage of anomalies from among the second set of anomalies correspond to counterpart anomalies from among the first set of anomalies; and
in response to the determining that more than the threshold percentage of anomalies from among the second set of anomalies correspond to the counterpart anomalies from among the first set of anomalies:
communicate the first security patch to the computing device; and
communicate an instruction that causes the first security patch to be executed on the computing device.