Back to results
US 11,689,574 B2Granted
Optimizing security and event information
AssigneeInternational Business Machines Corporation
InventorDale Bowie
Life of this patent
Estimating the term…
Abstract
A configuration of a security system is optimized based on revising metadata categories and one or more associated properties which comprise the metadata categories included in at least one rule used by the security system. The optimized configuration is transmitted to the security system. A current configuration of the security system is update. An indication of the update being successful is received.
Claims20
A method, the method comprising:
- receiving, by one or more processors, a current configuration of a security system describing:
- (i) properties available for extraction from at least one rule used by the security system, (ii) metadata categories associated with the properties, and (iii) which of the properties are enabled;
- revising the metadata categories and one or more associated which of the properties are enabled to determine a new configuration;
- transmitting, by one or more computer processors, the new configuration to the security system;
- updating, by one or more computer processors, a current configuration of the security system based on the new configuration;
- and
- receiving, by one or more computer processors, a first indication of the update being successful.
4 more elements
A computer program product, the computer program product comprising:
- one or more computer readable storage media;
- and
- program instructions stored on the one or more computer readable storage media, the program instructions comprising:
- program instructions to receive a current configuration of a security system describing:
- (i) properties available for extraction from at least one rule used by the security system, (ii) metadata categories associated with the properties, and (iii) whether the properties are enabled or disabled;
- program instructions to revise the metadata categories and the enabling or disabling of the properties to determine a new configuration;
- program instructions to transmit the new configuration to the security system;
- program instructions to update a current configuration of the security system based on the new configuration;
- and
- program instructions to receive a first indication of the update being successful.
7 more elements
A computer system, the computer system comprising:
- one or more computer processors;
- one or more computer readable storage media;
- and
- program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising:
- program instructions to receive a current configuration of a security system describing:
- (i) properties available for extraction from at least one rule used by the security system, (ii) metadata categories associated with the properties, and (iii) whether the properties are enabled or disabled;
- program instructions to revise the metadata categories and the enabling or disabling of the properties to determine a new configuration;
- program instructions to transmit the new configuration to the security system;
- program instructions to update a current configuration of the security system based on the new configuration;
- and
- program instructions to receive a first indication of the update being successful.
8 more elements
Dependencies are inferred from the claim text.