Threat mitigation system and method

A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

• generating, via one or more security-relevant subsystems, initial security-relevant information, wherein the one or more security-relevant subsystems include one or more of a content delivery network system, a database activity monitoring system, a user behavior analytics system, a mobile device management system, an identity and access management system, and a domain name server system;
• displaying the initial security-relevant information that includes analytical information;
• allowing a third-party to manipulate the initial security-relevant information with automation information;
• generating revised security-relevant information, resulting from the manipulated initial security-relevant information, that includes the automation information;
• obtaining one or more security-relevant information sets from each of the one or more security-relevant subsystems;
• defining an initial probabilistic model for accomplishing at least one defined task based on the one or more security-relevant information sets, the at least one defined task including a training routine for a specific attack of a computing platform, wherein defining the initial probabilistic model for accomplishing the at least one defined task includes generating a simulation of the specific attack;
• identifying one or more commonalities amongst the one or more security-relevant information sets, via the initial probabilistic model, using artificial intelligence/machine learning;
• and
• combining the one or more security-relevant information sets based on the one or more commonalities to form an aggregated security-relevant information set of the initial security-relevant information and the revised security-relevant information.

A computing system including a processor and memory configured to perform operations comprising:

• generating, via one or more security-relevant subsystems, initial security-relevant information, wherein the one or more security-relevant subsystems include one or more of a content delivery network system, a database activity monitoring system, a user behavior analytics system, a mobile device management system, an identity and access management system, and a domain name server system;
• displaying the initial security-relevant information that includes analytical information;
• allowing a third-party to manipulate the initial security-relevant information with automation information;
• generating revised security-relevant information, resulting from the manipulated initial security-relevant information, that includes the automation information;
• obtaining one or more security-relevant information sets from each of the one or more security-relevant subsystems;
• defining an initial probabilistic model for accomplishing at least one defined task based on the one or more security-relevant information sets, the at least one defined task including a training routine for a specific attack of a computing platform, wherein defining the initial probabilistic model for accomplishing the at least one defined task includes generating a simulation of the specific attack;
• identifying one or more commonalities amongst the one or more security-relevant information sets, via the initial probabilistic model, using artificial intelligence/machine learning;
• and
• combining the one or more security-relevant information sets based on the one or more commonalities to form an aggregated security-relevant information set of the initial security-relevant information and the revised security-relevant information.