Resource-centric network cyber attack warning system

A method for generating an alert related to a cyber attack, the method comprising:

• by one or more processors executing program instructions:
• receiving contextual information about a resource;
• selecting, based at least in part on the contextual information and from a plurality of sets of weights, a set of weights to apply to a set of events, wherein the set of events reflects activity that may be indicative of a cyber attack;
• determining, based at least in part on the set of events, the set of weights, and the contextual information, a risk score that indicates a probability that the resource is at risk of a cyber attack;
• and
• in response to the risk score satisfying a threshold value, generating an alert.

Non-transitory computer-readable storage comprising instructions for causing one or more computing devices to perform operations comprising:

• receiving contextual information about a resource;
• selecting, based at least in part on the contextual information and from a plurality of sets of weights, a set of weights to apply to a set of events, wherein the set of events reflects activity that may be indicative of a cyber attack;
• determining, based at least in part on the set of events, the set of weights, and the contextual information, a risk score that indicates a probability that the resource is at risk of a cyber attack;
• and
• in response to the risk score satisfying a threshold value, generating an alert.