Back to results
US 12,596,811 B2Granted
Threat intelligence systems
AssigneeVaronis Systems, Inc.
InventorsLior Chen, Amir Belgi, Ron Sneh, John Eugene Neystadt
Life of this patent
Estimating the term…
Abstract
A threat intelligence system utilising language models to generate queries for external threat intelligence systems, receive and filter responses, and generate alerts and reports using further language models.
Claims20
A computer-implemented threat intelligence assessment system, comprising
- a data storage system comprising computer readable storage media storing identifiers based on which relevant threat intelligence information can be identified;
- one or more computer readable storage media storing program instructions and one or more processors which, in response to executing the program instructions, are configured to:
- generate a semantic representation of a set of rules and a text representation of the set of rules;
- generate, based on the semantic and/or text representation of the set of rules, using a fine-tuned LLM, a set of requests for transmission to at least one external threat intelligence provider;
- transmit the set of requests to the at least one external threat intelligence provider;
- receive, from the at least one external threat intelligence provider, a set of results based on the transmitted queries;
- generate and store a semantic representation of the set of results;
- compare the semantic representation of the results with the semantic representation of the set of rules, and filter the results to retain the most similar results;
- and
- process the retained results using a second fine-tuned LLM to generate actionable alerts.
7 more elements
A computer-implemented method, comprising the steps of
- at a data storage system comprising computer readable storage media storing identifiers based on which relevant threat intelligence information can be identified;
- at a computer system comprising one or more computer readable storage media and one or more processors:
- —
- generating a semantic representation of a set of rules and a text representation of the set of rules;
- generating, based on the semantic and/or text representation of the set of rules, using a fine-tuned LLM, a set of requests for transmission to at least one external threat intelligence provider;
- transmitting the set of requests to the at least one external threat intelligence provider;
- receiving, from the at least one external threat intelligence provider, a set of results based on the transmitted queries;
- generating and storing a semantic representation of the set of results;
- comparing the semantic representation of the results with the semantic representation of the set of rules, and filter the results to retain the most similar results;
- and
- processing the retained results using a second fine-tuned LLM to generate actionable alerts.
8 more elements
Dependencies are inferred from the claim text.