US 2019/0166152 A1 · SYSTEM FOR INFORMATION SECURITY THREAT ASSESSMENT

Abstract

The invention utilizes a two-component system to detect third party security threats and drive internal system processes based on the detection. The first component of the system is a threat level engine, which collects external and internal system data on a real-time basis to determine changes in conditions that may give rise to a security threat. Based on the external and internal data, the level engine may calculate a threat assessment level to determine the level of the threat. The second component of the system is a third party analytics engine, which may comprise a machine learning component which is configured to detect threat patterns and anomalies, which may in turn be used to trigger events or to drive internal system processes.

Claims18

Dependent claims

A system for determining security threat levels in order to drive internal system processes, comprising:

an entity computing system comprising:
a processor;
a communication interface;
and
a memory having a threat level engine stored therein, wherein the threat level engine, when executed by the processor, causes the processor to:
retrieve, from an entity database server, internal security threat data associated with a third party application;
retrieve, from a third party computing system, external security threat data associated with the third party application;
calculate, via a threat level engine, a security threat level of the third party application based on the internal security threat data and the external security threat data;
determine, using the security threat level of the third party application, that the third party application represents a security threat;
and
based on determining that the third party application represents a security threat, execute security resolution steps to mitigate the security threat.

8 more elements

A computer program product for determining security threat levels in order to drive internal system processes, the computer program product comprising at least one non-transitory computer readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:

an executable portion for retrieving, from an entity database server, internal security threat data associated with a third party application;
an executable portion for retrieving, from a third party computing system, external security threat data associated with the third party application;
an executable portion for calculating, via a threat level engine, a security threat level of the third party application based on the internal security threat data and the external security threat data;
an executable portion for determining, using the security threat level of the third party application, that the third party application represents a security threat;
and
an executable portion for, based on determining that the third party application represents a security threat, executing security resolution steps to mitigate the security threat.

3 more elements

Dependencies are inferred from the claim text.

System for information security threat assessment

Life of this patent

System for information security threat assessment

Life of this patent

Abstract

Claims18