Autonomous report composer

An apparatus, comprising a formatting module that at least has an autonomous report composer and a set of one or more libraries,

• where the autonomous report composer is configured to compose a type of report on cyber threats that is composed in a human-readable format with natural language prose, terminology, and a level of detail on the cyber threats aimed at a target audience, where the autonomous report composer is configured to select a first type of report from different types of possible reports,
• where the autonomous report composer cooperates with the one or more libraries of sets of prewritten text templates with i) one or more standard pre-written sentences written in the natural language prose derived from previously generated reports of the first type as well as ii) one or more of the prewritten text templates with fillable blanks, also derived from previously generated reports of the first type, but have fillable blanks that are populated with data for the cyber threats specific for a current report being composed, where a template for the first type of report contains two or more sections in that template, each section having different standard pre-written sentences written in the natural language prose as well as one or more of the prewritten text templates with fillable blanks for that section of the first type of report on cyber threats, where the autonomous report composer is implemented with logic, and
• where the autonomous report composer is further configured to cooperate with one or more machine learning models trained on composing reports on cyber threats, where the autonomous report composer cooperating with the one or more machine learning models compose the first type of report by 1) initially choosing the first type of report from a category of the different types of possible reports to be generated, 2) where each different type of possible report is created to effectively convey relevant information to a different level of intended target audience including any of an executive and a cyber professional and then 3) each type of report will have a corresponding template of that report type with multiple sections making up that report type, 4) where each section will have its own set of i) prewritten text templates, ii) graphs, iii) charts and iv) any combination of these, that are routinely presented in each of those sections making up that type of report,
• where the apparatus further comprises software instructions that are implemented in the formatting module, the autonomous report composer, and the set of one or more libraries, the software instructions are stored in an executable form in a memory and are configured to be executed by one or more processors.

A method for an AI cyber-security analyst to protect a network from the cyber threats, comprising:

• configuring a formatting module to at least have an autonomous report composer and a set of one or more libraries,
• configuring the autonomous report composer to compose a type of report on cyber threats that is composed in a human-readable format with natural language prose, terminology, and a level of detail on the cyber threats aimed at a target audience,
• configuring the autonomous report composer to cooperate with the one or more libraries of sets of prewritten text templates with i) one or more standard pre-written sentences written in the natural language prose derived from previously generated reports of a first type of report as well as ii) one or more of the prewritten text templates with fillable blanks, also derived from previously generated reports of the first type of report, but have fillable blanks that are populated with data for the cyber threats specific for a current report being composed, where a template for the type of report contains two or more sections in that template, each section having different standard pre-written sentences written in the natural language prose as well as one or more of the prewritten text templates with fillable blanks for that section, where the autonomous report composer is implemented with logic,
• configuring the formatting module and the autonomous report composer to be part of the system to protect a network from the cyber threats that uses one or more Artificial Intelligence models trained with machine learning on a normal behavior of entities in the network, where a breach of the AI models with its data and description are used to map specific incidents to related fillable blanks in the sentences, and
• configuring the autonomous report composer to select the first type of report from different types of possible reports, where the first type of report on the cyber threats is a threat assessment drafted by the autonomous report composer with natural language prose, terminology, and the level of detail on the cyber threats aimed at a cyber professional with details on and data from making, testing, and refining a series of successive hypotheses on potential cyber threats and salient points to support or refute each hypothesis, which are assessed using a combination of supervised machine learning, unsupervised machine learning, and algorithms, which is formatted and written at a level to capture relevant details and the language of the cyber professional.

A method for an AI cyber-security analyst to protect a network from the cyber threats, comprising configuring a formatting module to at least have an autonomous report composer and a set of one or more libraries,

• configuring the autonomous report composer to compose a type of report on cyber threats that is composed in a human-readable format with natural language prose, terminology, and a level of detail on the cyber threats aimed at a target audience,
• configuring the autonomous report composer to cooperate with the one or more libraries of sets of prewritten text templates with i) one or more standard pre-written sentences written in the natural language prose derived from previously generated reports of a first type of report as well as ii) one or more of the prewritten text templates with fillable blanks, also derived from previously generated reports of the first type of report, but have fillable blanks that are populated with data for the cyber threats specific for a current report being composed, where a template for the first type of report contains two or more sections in that template, each section having different standard pre-written sentences written in the natural language prose as well as one or more of the prewritten text templates with fillable blanks for that section,
• configuring the formatting module and the autonomous report composer to be part of the system to protect a network from the cyber threats that uses one or more Artificial Intelligence models trained with machine learning on a normal behavior of entities in the network, where a breach of the AI models with its data and description are used to map specific incidents to related fillable blanks in the sentences, and
• configuring a second type of report on the cyber threats to be an executive level threat-landscape drafted by the autonomous report composer with natural language prose, terminology, and the level of detail on the cyber threats aimed at a business executive audience that summarizes the cyber threats encountered by an organization with individual incidents mapped to overall incident categories over a defined time period with an analysis and explanation of the summarized cyber threats, where the natural language prose and terminology are selected by the autonomous report composer from a set of libraries corresponding to the second type of report template.