Prioritization and remediation of computer security attacks

One or more non-transitory computer-readable media storing computer program instructions which, when executed by one or more processors, cause:

• receiving a plurality of security events, from one or more clients, describing security issues that have been detected,
• wherein the security issues are related to computer security,
• wherein each of the plurality of security events comprises attributes describing:
• a type of security issue to be remedied,
• one or more resources affected by the security issue, and
• a risk score defining a level of security risk associated with the security issue based on a number of impacted computer resources or an amount of work to remedy the security issue;
• aggregating the plurality of security events into a set of recommendation categories of a plurality of categories based on the type of security issue to be remedied, wherein each recommendation category in the set of recommendation categories contains one or more aggregated security events having same type of security issue;
• computing an aggregated risk score for each recommendation category in the set of recommendation categories, wherein the aggregated risk score for said each recommendation category is based on one or more risk scores associated with the one or more aggregated security events belonging to said each recommendation category, wherein each of the one or more risk scores is defined as being either based on the number of impacted computing resources or the amount of work to remedy the corresponding security issue;
• causing displaying, within a graphical user interface, information representing the set of recommendation categories based on the aggregated risk scores;
• receiving, via the graphical user interface, user input selecting a particular recommendation category from the set of recommendation categories;
• in response to selecting the particular recommendation category, causing displaying options to remedy the security issues within the particular recommendation category.

A system including at least one processor and memory coupled to the processor, the memory loaded with computer program instructions that, when executed on the at least one processor, cause the at least one processor to carry out a method, comprising:

• receiving a plurality of security events, from one or more clients, describing security issues that have been detected,
• wherein the security issues are related to computer security,
• wherein each of the plurality of security events comprises attributes describing:
• a type of security issue to be remedied,
• one or more resources affected by the security issue, and
• a risk score defining a level of security risk associated with the security issue based on a number of impacted computer resources or an amount of work to remedy the security issue;
• aggregating the plurality of security events into a set of recommendation categories of a plurality of categories based on the type of security issue to be remedied, wherein each recommendation category in the set of recommendation categories contains one or more aggregated security events having same type of security issue;
• computing an aggregated risk score for each recommendation category in the set of recommendation categories, wherein the aggregated risk score for said each recommendation category is based on one or more risk scores associated with the one or more aggregated security events belonging to said each recommendation category, wherein each of the one or more risk scores is defined as being either based on the number of impacted computing resources or the amount of work to remedy the corresponding security issue;
• causing displaying, within a graphical user interface, information representing the set of recommendation categories based on the aggregated risk scores;
• receiving, via the graphical user interface, user input selecting a particular recommendation category from the set of recommendation categories;
• in response to selecting the particular recommendation category, causing displaying options to remedy the security issues within the particular recommendation category.