Back to results
US 2018/0375893 A1Published application
System and Method for Assigning Threat Valuations to Network Events and Security Events
AssigneeFluency Corp.
InventorsChristopher Jordan, Kun Luo
Life of this patent
Estimating the term…
Abstract
A method including receiving a record in a first timeframe; establishing a plurality of threat vectors for the record; merging the plurality of threat vectors to the record; generating a risk valuation for the record based on the plurality of threat vectors; merging the risk valuation to the record to form a risk event; and storing the risk event in a computer-readable data store.
Claims20
A method comprising:
- receiving a record in a first timeframe;
- establishing a plurality of threat vectors for the record;
- merging the plurality of threat vectors to the record;
- generating a risk valuation for the record based on the plurality of threat vectors;
- merging the risk valuation to the record to form a risk event;
- and
- storing the risk event in a computer-readable data store.
4 more elements
A method comprising:
- receiving or retrieving a plurality of events in a first timeframe, each of the events comprising a plurality of attribute-value pairs;
- deriving a first key for each event of the plurality of events;
- superimposing each event of the plurality of events having a same first key into a record to form a plurality of records;
- superimposing a plurality of threat factors to each record of the plurality of records;
- calculating a threat valuation for each record of the plurality of records based on the plurality of threat factors superimposed to the respective record of the plurality of records;
- and
- generating a risk event for each record of the plurality of records if the threat valuation is above a predetermined threshold value;
- and
- storing the risk events in a computer-readable data store.
6 more elements
A device comprising:
- a system that receives or retrieves a plurality of events in a sliding window;
- a processor that forms a plurality of security events by:
- merging each event sharing an IP-couple-pair into a record to form a plurality of records;
- merging a plurality of threat factors to each record of the plurality of records;
- and
- merging a risk score to each record of the plurality of records based on the threat factors present in the respective record of the plurality of records to form the plurality of security events;
- and
- a computer readable data store that stores the plurality of security events.
5 more elements
Dependencies are inferred from the claim text.