Collective Threat Intelligence Gathering System
AssigneeVigilant LLC
InventorsJoseph C. Magee, Alison M. Andrews, Mark W. Nicholson, Jonathon Lance James, Henry C. Li, Christopher L. Stevenson, Joel Lathrop
Life of this patent
Estimating the term…
Abstract
Threat intelligence is collected from a variety of different sources. The threat intelligence information is aggregated, normalized, filtered and scored to identify threats to an information network. Threats are categorized by type, maliciousness and confidence level. Threats are reported to network administrators in a plurality of threat feeds, including for example malicious domains, malicious IP addresses, malicious e-mail addresses, malicious URLs and malicious software files.
Claims17
A system for collecting threat intelligence information, comprising:
- a database for storing threat intelligence information;
- a threat information collector, configured to collect threat intelligence information from a plurality of threat intelligence information sources, wherein the threat intelligence information from each of the plurality of threat information sources is provided in a different format;
- a threat intelligence information parser, configured to parse the threat intelligence information into a common format and store the threat intelligence information into the database;
- a threat intelligence information scoring engine, configured to receive the threat intelligence information from the database and calculate a threat score for the threat intelligence information;
- and
- a threat intelligence information distributor, configured to distributed the threat intelligence information and the threat scores to a plurality of consumers of threat intelligence information.
Dependencies are inferred from the claim text.