US 10,855,714 B2Granted

Systems and methods for an artificial intelligence driven agent

AssigneeKnowBe4, Inc.

InventorsAlin Irimie, Stu Sjouwerman, Greg Kras, Eric Sites

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method is described that sends multiple simulated phishing emails, text messages, and/or phone calls (e.g., via VoIP) varying the quantity, frequency, type, sophistication, and combination using machine learning algorithms or other forms of artificial intelligence. In some implementations, some or all messages (email, text messages, VoIP calls) in a campaign after the first simulated phishing email, text message, or call may be used to direct the user to open the first simulated phishing email or text message, or to open the latest simulated phishing email or text message. In some implementations, simulated phishing emails, text messages, or phone calls of a campaign may be intended to lure the user to perform a different requested action, such as selecting a hyperlink in an email or text message, or returning a voice call.

Claims30

Dependent claims

A method for determining a sequence and types of communications for a simulated phishing campaign, the method comprising:

(a) storing, by a server to a database, results from a plurality of simulated phishing campaigns communicated to a plurality of users, the plurality of simulated phishing campaigns comprising a plurality of different sequences of types of communications to each of the plurality of users, the results identifying behavior of the plurality of users interacting with the plurality of simulated phishing campaigns, wherein the plurality of different sequences of types of communications comprises an email subsequent to or preceded by at least one of a text, SMS message, a phone call or an Internet based communication;
(b) determining, by a simulated phishing attack manager based on applying artificial intelligence to at least the results, to use within a simulated phishing campaign, the types of communications and the sequence of the types of communications having a predetermined likelihood of causing one or more users of the plurality of users to take a predetermined action, the sequence comprising a first type of communication and a second type of communication subsequent to the first type of communication, the first type of communication comprising at least one of email, text, short message service (SMS) message, a phone call or an Internet based communication and the second type of communication comprising one of email, text, SMS message, a phone call or an Internet based communication different from the first type of communication;
and
(c) executing, by the simulated phishing attack manager responsive to the determination, the simulated phishing campaign comprising the sequence of the types of communications, the simulated phishing attack manager communicating within the simulation phishing campaign the second type of communication subsequent to the first type of communication.

1 more element

A system for determining a sequence and types of communications for a simulated phishing campaign, the system comprising:

one or more processors, coupled to memory;
a database configured to store results from a plurality of simulated phishing campaigns communicated to a plurality of users, the plurality of simulated phishing campaigns comprising a plurality of different sequences of types of communications to each of the plurality of users;
the results identifying behavior of the plurality of users interacting with the plurality of simulated phishing campaigns, wherein the plurality of different sequences of types of communications comprise an email subsequent to or preceded by at least one of a text, SMS message, a phone call or an Internet based communication;
and
a simulated phishing attack manager executable on the one or more processors, coupled to memory and configured to:
determine, based on applying artificial intelligence to at least the results stored in the database, to use within a simulated phishing campaign, the types of communications and the sequence of the types of communications having a predetermined likelihood of causing one or more users to take a predetermined action, the sequence comprising a first type of communication and a second type of communication subsequent to the first type of communication;
and
execute, responsive to the determination, the simulated phishing campaign comprising the second type of communication being communicated subsequent to the first type of communication;
and
wherein the first type of communication comprises at least one of email, text, short message service (SMS) message, a phone call or an Internet based communication and the second type of communication comprising one of email, text, SMS message, a phone call or an Internet based communication different from the first type of communication.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/798,187Filed 30 Oct 2017 · us provisional application
Priority: 31 Oct 2016
Published: US 2018/0124108 A13 May 2018
Granted: 1 Dec 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification17 codes

H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis
G06F 16/951
Retrieval from the web: indexing; Web crawling techniques
G06F 21/56
Detecting local intrusion or implementing counter-measures: computer malware detection or handling, e.g. anti-virus arrangements
G06F 30/20
Computer-aided design [CAD]: design optimisation, verification or simulation