Back to results
US 11,894,981 B1Granted
Systems and methods for generating soar playbooks
AssigneeFortinet, Inc.
InventorsBK Bharathram, Abhishek Narula, Pooja Singh
Life of this patent
Estimating the term…
Abstract
Various approaches are discussed for generation of SOAR playbooks using a variety playbook sources.
Claims17
A method for generating a Security Orchestration, Automation, and Response (SOAR) playbook for network security, the method comprising:
- receiving, by a processing resource, a visual representation of a network process;
- converting, by the processing resource, the visual representation of the network process to an intermediate format of Java Script Object Notation;
- mapping, by the processing resource, each element of the intermediate format to a manual SOAR operation to yield a manual SOAR playbook representing the network process;
- converting, by the processing resource, at least one element of the manual SOAR playbook to an automated SOAR operation to yield an automated SOAR playbook;
- and
- taking a security action from the automated SOAR operation of the automated SOAR playbook.
3 more elements
A system for generating a Security Orchestration, Automation, and Response (SOAR) playbook for network security, the system comprising:
- a processing resource;
- a non-transient computer readable medium coupled to the processing resource and having stored therein instructions that when executed by the processing resource cause the processing resource to:
- receive a visual representation of a network process;
- convert the visual representation of the network process to an intermediate format of Java Script Object Notation;
- map each element of the intermediate format to a manual SOAR operation to yield a manual SOAR playbook representing the network process;
- and
- convert at least one element of the manual SOAR playbook to an automated SOAR operation to yield an automated SOAR playbook;
- wherein the processing resource takes a security action from the automated SOAR operation of the automated SOAR playbook.
5 more elements
A non-transient computer readable medium including instructions that when executed by a processing resource cause a method for generating a Security Orchestration, Automation, and Response (SOAR) playbook for network security, comprising:
- receiving a visual representation of a network process;
- converting the visual representation of the network process to an intermediate format of Java Script Object Notation;
- mapping each element of the intermediate format to a manual SOAR operation to yield a manual SOAR playbook representing the network process;
- converting at least one element of the manual SOAR playbook to an automated SOAR operation to yield an automated SOAR playbook;
- and
- taking a security action from the automated SOAR operation of the automated SOAR playbook.
3 more elements
Dependencies are inferred from the claim text.