Blockchain-based threat intelligence
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsShankar Djeyassilane, Hiranmayi Palanki
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments for providing blockchain-based threat intelligence. First, a computer determines that a request for a remedial action has been recorded to a blockchain by a smart contract. Then, the computer evaluates the request for the remedial action to determine the remedial action to be performed. Subsequently, the computer causes the remedial action to be performed by a security service.
Claims20
A system, comprising:
- a computing device comprising a processor and a memory;
- and
- machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
- determine that a request for a remedial action has been recorded to a blockchain by a first smart contract, wherein the request comprises at least one of a rule update, a policy update, an attack signature, or a threat reference and wherein the first smart contract recorded the request for the remedial action to the blockchain in response to receipt of a threat intelligence report from a second smart contract;
- identify the first smart contract that recorded the request for the remedial action;
- identify a security service based at least in part on an identity of the first smart contract;
- determine the remedial action to be performed based at least in part on the request for the remedial action and the identity of the first smart contract;
- and
- cause the remedial action to be performed by the security service.
A method, comprising:
- determining that a request for a remedial action has been recorded to a blockchain by a first smart contract, wherein the request comprises at least one of a rule update, a policy update, an attack signature, or a threat reference and wherein the first smart contract recorded the request for the remedial action to the blockchain in response to receipt of a threat intelligence report from a second smart contract;
- identifying the first smart contract that recorded the request for the remedial action;
- identifying a security service based at least in part on an identity of the first smart contract;
- determining the remedial action to be performed based at least in part on the request for the remedial action and the identity of the first smart contract;
- and
- causing the remedial action to be performed by the security service.
A non-transitory, computer-readable medium, comprising machine-readable instructions that, when executed by a processor of a computing device, cause the computing device to at least:
- determine that a request for a remedial action has been recorded to a blockchain by a first smart contract, wherein the request comprises at least one of a rule update, a policy update, an attack signature, or a threat reference and wherein the first smart contract recorded the request for the remedial action to the blockchain in response to receipt of a threat intelligence report from a second smart contract;
- identify the first smart contract that recorded the request for the remedial action:
- identify a security service based at least in part on an identity of the first smart contract;
- determine the remedial action to be performed based at least in part on the request for the remedial action and the identity of the first smart contract;
- and
- cause the remedial action to be performed by the security service.
Dependencies are inferred from the claim text.