Threat mitigation system and method
AssigneeReliaquest Holdings, LLC
InventorsBrian P. Murphy, Joe Partlow, Colin O'Connor, Jason Pfeiffer, Brian Philip Murphy
Life of this patent
Estimating the term…
Abstract
A computer-implemented method, computer program product and computing system for: detecting one or more security events within a computing platform of a client; notifying the client of the one or more security events within the computing platform; determining how long it took the client to resolve the one or more security events within the computing platform; and providing a resolution report to the client that quantifies client resolution performance based, at least in part, upon how long it took the client to resolve the one or more security events within the computing platform.
Claims18
A computer-implemented method, executed on a computing device, comprising:
- monitoring, by a Security Information and Event Management (SIEM) system, activity of one or more security-relevant subsystems;
- detecting, by the SIEM system, one or more security events within a computing platform of a client;
- notifying the client of the one or more security events within the computing platform;
- determining how long it took the client to resolve the one or more security events within the computing platform;
- and
- providing a resolution report to the client that quantifies client resolution performance based, at least in part, upon how long it took the client to resolve the one or more security events within the computing platform, wherein the resolution report defines a client resolution time with respect to how long it took the client to resolve the one or more security events within the computing platform and compares the client resolution time to a resolution time of third parties.
A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
- monitoring, by a Security Information and Event Management (SIEM) system, activity of one or more security-relevant subsystems;
- detecting, by the SIEM system, one or more security events within a computing platform of a client;
- notifying the client of the one or more security events within the computing platform;
- determining how long it took the client to resolve the one or more security events within the computing platform;
- and
- providing a resolution report to the client that quantifies client resolution performance based, at least in part, upon how long it took the client to resolve the one or more security events within the computing platform, wherein the resolution report defines a client resolution time with respect to how long it took the client to resolve the one or more security events within the computing platform and compares the client resolution time to a resolution time of third parties.
A computing system including a processor and memory configured to perform operations comprising:
- monitoring, by a Security Information and Event Management (SIEM) system, activity of one or more security-relevant subsystems;
- detecting, by the SIEM system, one or more security events within a computing platform of a client;
- notifying the client of the one or more security events within the computing platform;
- determining how long it took the client to resolve the one or more security events within the computing platform;
- and
- providing a resolution report to the client that quantifies client resolution performance based, at least in part, upon how long it took the client to resolve the one or more security events within the computing platform, wherein the resolution report defines a client resolution time with respect to how long it took the client to resolve the one or more security events within the computing platform and compares the client resolution time to a resolution time of third parties.
Dependencies are inferred from the claim text.