Parallelism and n-tiering of knowledge inference and statistical correlation system

An n-tiering security threat inference and correlation apparatus for monitoring and anticipating cyber attacks, the apparatus comprising:

• one or more processors;
• and memory communicatively coupled to the one or more processors, the memory storing computer-excutable systems executable by the one or more processors, the computer-executable systems including:
• a plurality of groups of inference-correlation systems, each group arranged with at least one inference system and at least one associated correlation system configured to monitor at least one network;
• and
• an input/output (I/O) system configured to receive security events, and broadcast the received security events to the plurality of groups of inference-correlation systems;
• wherein respective groups of inference-correlation systems are configured to process only the broadcasted security events relevant to respective networks to identify the cyber attacks;
• and
• wherein the at least one inference system includes being arranged to perform the processing based on defined inference rules to identify high value and low value events, and the inference rules are obtained from stochastic parameters that are user-customisable according to severity attributes.