US 11,687,717 B2 · System and method for monitoring and routing of computer traffic for cyber threat risk embedded in electronic documents

Abstract

Disclosed herein are computer-implement systems and methods for determining whether an electronic document transiting a computer network is safe for viewing and does not contain malicious code, and automatically routing or deleting such electronic document based on such determination, thus providing quick risk decisions relating to the electronic document using an objective, quantitative method. A search algorithm is employed to detect the presence of words or phrases in the subject electronic document that are possible threats to the computer network. Threat updates may be provided through publicly available threat database. A weight is added to the generated score that accounts for the time that the particular vulnerability has been in the subject threat database. Finally, a PNN is used to quickly and objectively classify the subject electronic document for acceptance, quarantine, or denial.

Claims20

Dependent claims

An automated method for monitoring and routing of electronic documents received at a computer network, comprising:

receiving at a processor of a document cyber risk evaluation computer an electronic textual document;
determining at said processor a frequency of occurrence for each of a plurality of words in said electronic textual document;
causing said processor to communicate with a database containing known cyber vulnerabilities and exposures associated words, and identifying at said processor a collection of said plurality of words in said electronic textual document that are present in said database;
converting at said processor said collection of said plurality of words in said electronic textual document into input vectors configured as input to a probabilistic neural network (PNN);
causing at said processor said PNN to classify said electronic textual document, using said input vectors, as one of accept, quarantine, or deny;
and
routing said electronic textual document at said processor based on a classification of said input vectors to cause one of releasing said electronic textual document to a user computer on said computer network, storing said electronic textual document in memory for further analysis before releasing said electronic textual document to a user, and deleting said electronic textual document from said computer network.

4 more elements

A system for monitoring and routing of electronic documents received at a computer network, comprising a memory and a processor in data communication with said memory, the memory having computer executable instructions stored thereon configured to be executed by the processor to cause the system to:

receive an electronic textual document;
determine a frequency of occurrence for each of a plurality of words in said electronic textual document;
communicate with a database containing known cyber vulnerabilities and exposures associated words, and identify a collection of said plurality of words in said electronic textual document that are present in said database;
convert said collection of said plurality of words in said electronic textual document into input vectors configured as input to a probabilistic neural network (PNN);
cause said PNN to classify said electronic textual document, using said input vectors, as one of accept, quarantine, or deny;
and
route said electronic textual document based on a classification of said input vectors to cause one of releasing said electronic textual document to a user computer on said computer network, storing said electronic textual document in memory for further analysis before releasing said electronic textual document to a user, and deleting said electronic textual document from said computer network.

4 more elements

A non-transitory computer-readable medium having stored thereon a plurality of instructions executable by one or more processors, the instructions configured to cause the one or more processors to perform the actions of an automated method for monitoring and routing of electronic documents received at a computer network, the actions of the method comprising the steps of:

receiving an electronic textual document;
determining a frequency of occurrence for each of a plurality of words in said electronic textual document;
communicating with a database containing known cyber vulnerabilities and exposures associated words, and identifying a collection of said plurality of words in said electronic textual document that are present in said database;
converting said collection of said plurality of words into input vectors configured as input to a probabilistic neural network (PNN);
causing said PNN to classify said electronic textual document, using said input vectors, as one of accept, quarantine, or deny;
and
routing said electronic textual document based on a classification of said input vectors to cause one of releasing said electronic textual document to a user computer on said computer network, storing said electronic textual document in memory for further analysis before releasing said electronic textual document to a user, and deleting said electronic textual document from said computer network.

4 more elements

Dependencies are inferred from the claim text.

System and method for monitoring and routing of computer traffic for cyber threat risk embedded in electronic documents

Life of this patent

System and method for monitoring and routing of computer traffic for cyber threat risk embedded in electronic documents

Life of this patent

Abstract

Claims20