System and method for a meta scan engine
AssigneeTrinity Cyber, LLC
InventorsStephen Ryan, Stefan BARANOFF, John Searles
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer-readable storage media for improved data comparison, particularly when scanning large amounts of data for particular conditions or configurations. With respect to cyber-security, this improvement takes the form of receiving a plurality of threat conditions for cyber threats against a networked computer device; identifying commonalities among the plurality of threat conditions by comparing each threat condition in the plurality of threat conditions against the plurality of threat conditions; generating, based on the commonalities, a hierarchy for scanning of the cyber threats; and scanning for the cyber threats according to the hierarchy.
Claims21
A method comprising:
- receiving a plurality of threat conditions for cyber threats against a networked computer device;
- identifying, via a computer, commonalities among the plurality of threat conditions by comparing each threat condition in the plurality of threat conditions against the plurality of threat conditions;
- generating, via the computer and based on plurality of threat conditions and the commonalities, a hierarchy for scanning of the cyber threats, the hierarchy having lowest layers of threats which are connected to higher layers of threats by the commonalities;
- scanning, via the computer, for all of the lowest layers of threats simultaneously;
- and
- upon meeting a predetermined number of Boolean conditions during the scanning of the lowest layers, scanning at a higher layer of the hierarchy.
A system, comprising:
- a processor;
- and
- a computer-readable storage medium having instructions stored which, when executed by the processor, cause the processor to perform operations comprising:
- receiving a plurality of threat conditions for cyber threats against a networked computer device;
- identifying commonalities among the plurality of threat conditions by comparing each threat condition in the plurality of threat conditions against the plurality of threat conditions;
- generating, based on the plurality of threat conditions and the commonalities, a hierarchy for scanning of the cyber threats, the hierarchy having lowest layers of threats which are connected to higher layers of threats by the commonalities;
- scanning for all of the lowest layers of threats simultaneously;
- and
- upon meeting a predetermined number of Boolean conditions during the scanning of the lowest layers, scanning at a higher layer of the hierarchy.
A non-transitory computer-readable storage medium having instructions stored which, when executed by a computing device, cause the computing device to perform operations comprising:
- receiving a plurality of threat conditions for cyber threats against a networked computer device;
- identifying commonalities among the plurality of threat conditions by comparing each threat condition in the plurality of threat conditions against the plurality of threat conditions;
- generating, based on the plurality of threat conditions and the commonalities, a hierarchy for scanning of the cyber threats, the hierarchy having lowest layers of threats which are connected to higher layers of threats by the commonalities;
- scanning for all of the lowest layers of threats simultaneously;
- and
- upon meeting a predetermined number of Boolean conditions during the scanning of the lowest layers, scanning at a higher layer of the hierarchy.
Dependencies are inferred from the claim text.