Home » Posts tagged 'Patent'
Tag Archives: Patent
A new patent received by CSE faculty
Inventors from Qatar University: Dr Armstrong Nhlabatsi, Eng. Rachael Fernandez, Eng. Alaa Hussein, Dr. Noora Fetais, and Dr Khaled Khan received a new patent titled: “Threat-Specific Security Risk Evaluation for Networked Systems”.
Existing security risk evaluation approaches do not consider specific security requirements of individual organizations in the security risk evaluation. This patent has defined a threat-specific risk evaluation approach that uses various security attributes of the cloud as well as the organization-specific security requirements. The patented approach allows a security administrator of the cloud provider to make fine-grained decisions for selecting mitigation strategies in order to protect the outsourced computing assets of individual organizations based on their specific security needs against specific threats. On the other hand, the proposed approach enables security administrators to compute a range of more effective organization-specific countermeasures with respect to the importance of security requirements and threats. The experimental evaluation results demonstrate that effective security solutions vary due to specific threats prioritized by different organizations for an application in the cloud. Further, the proposed approach is not limited to only the cloud-based systems, but can easily be adopted to other networked systems. We have also developed a software tool to support the proposed approach. This patented approach is an improved technique for monitoring the security of network. The team hopes this invention will make evaluation of network security risk more effective and robust.
Congratulations to the patent team!
New Patent Granted for CSE Faculty in Collaboration with KINDI Center
Dr. Khaled Khan and Dr. Noora Fetais from the Department of Computer Science and Engineering (CSE) have been awarded a patent titled “Methods and Systems for Monitoring Network Security” in collaboration with KINDI Center for Computing Research in the College of Engineering at Qatar University.
The Qatar National Research Funds has supported this research under National Priority Research Program (NPRP8-531-1-111). Dr. Khaled and Dr Noora acted as the Lead PI and PI of the project respectively. Dr. Armstrong Nhlabatsi from KINDI also participated in the research project. They collaborated with the researchers from the University of Canterbury (New Zealand) and the University of Queensland (Australia).
Modern networks are becoming more and more dynamic, such as frequent changes compared to the traditional static networks (e.g., hosts addition and removal, vulnerability change, applications and services update, and attack surface change). In a dynamic network, the configuration of at least one of the hosts or edges changes over time. The dynamic network is a network selected from a group of configured components including cloud computing, a software-defined networking arrangement, or an Internet of Things network. As network components change over time, the security posture of the network also changes, as vulnerabilities associated with the network components shift accordingly. Hence, it is of paramount importance to be able to assess the security of dynamic networks in order to understand and further enhance the security.
This patented approach is a new technique for monitoring the security of a computing network, which includes a plurality of hosts and a plurality of edges which link connected hosts. The method comprises capturing and storing network state information in response to at least one of the time-driven trigger, an event-driven trigger or a user-driven trigger. The method further comprises storing security-related data which is indicative of the change in the security of the network during the time window for a user to monitor the change in the security of the network. Detecting a change in the security of the network comprises at least one of the following events: the addition of a new host to the network; the removal of a host from the network; the addition of a new edge to the network; the removal of an edge from the network; the addition of a vulnerability to a host in the network; or the removal of a vulnerability from a host in the network. The method calculates at least one security metric for the network and a weight value for at least one of the components in the network. The approach is capable of capturing such critical changes and reflecting the modified security posture in order to precisely assess the security of dynamic networks.
US Patent Granted to Dr. Khan for Adaptive Security Research
Dr. Khaled Khan and Dr. Armstrong Nhlabatsi from the College of Engineering at Qatar University (QU) have recently obtained a US Patent (No. 10,713,355) for their invention of adaptive security. This research project was funded by the Qatar National Research Fund (QNRF).