Method and system for identifying emerging threats in real-time

A system for identifying emerging threats in real-time, the system comprising:

• a processor;
• and
• a memory communicatively coupled to the processor, wherein the memory stores processor-executable instructions, which, on execution, causes the processor to:
• receive a first set of feature vectors created from content comprising an event comprising one or more entities;
• determine a first set of dimensions for each of the first set of feature vectors;
• compare the first set of dimensions, for each of the first set of feature vectors, with a second set of dimensions associated with each of a plurality of second sets of feature vectors created for historical events, wherein the second set of dimensions and the plurality of second sets of feature vectors are stored in an associated primary repository, wherein the first set of dimensions and the second set of dimensions comprise at least one of a frequency dimension, a recency dimension, a pattern dimension, and an intensity dimension;
• compute a degree of proximity of the first set of feature vectors relative to each of the plurality of second sets of feature vectors based on the comparison, through a proximity analysis;
• identify, contemporaneous to receiving the first set of feature vectors, a second set of feature vectors from the plurality of second sets of feature vectors, wherein the second set of feature vectors has the highest degree of proximity to the first set of feature vectors;
• classify the event into an event category from a plurality of predefined event categories based on the degree of proximity of the first set of feature vectors relative to the second set of feature vectors and at least one predefined threshold, wherein the plurality of predefined event categories comprises an existing event, a new event, and a partially existing event;
• and
• identify the event as at least one emerging threat, in response to the classifying.

A non-transitory computer-readable medium storing computer-executable instructions for identifying emerging threats in real-time, the stored instructions, when executed by a processor, cause the processor to perform operations comprising:

• receiving a first set of feature vectors created from content comprising an event comprising one or more entities;
• determining a first set of dimensions for each of the first set of feature vectors;
• comparing the first set of dimensions, for each of the first set of feature vectors, with a second set of dimensions associated with each of a plurality of second sets of feature vectors created for historical events, wherein the second set of dimensions and the plurality of second sets of feature vectors are stored in an associated primary repository, wherein the first set of dimensions and the second set of dimensions comprise at least one of a frequency dimension, a recency dimension, a pattern dimension, and an intensity dimension;
• computing a degree of proximity of the first set of feature vectors relative to each of the plurality of second sets of feature vectors based on the comparison, through a proximity analysis;
• identifying, contemporaneous to receiving the first set of feature vectors, a second set of feature vectors from the plurality of second sets of feature vectors, wherein the second set of feature vectors has the highest degree of proximity to the first set of feature vectors;
• classifying the event into an event category from a plurality of predefined event categories based on the degree of proximity of the first set of feature vectors relative to the second set of feature vectors and at least one predefined threshold, wherein the plurality of predefined event categories comprises an existing event, a new event, and a partially existing event;
• and
• identifying the event as at least one emerging threat, in response to the classifying.