System and method for custom security predictive methods
AssigneeInterset Software Inc.
InventorsStephan Jou, Mario Daigle, Shaun Pilkington, Michael John Cyze, Josh Mahonin, Wesley Lawrence
Life of this patent
Estimating the term…
Abstract
A system and method is described for providing custom predictive models for detecting electronic security threats within an enterprise computer network. The custom models may be defined in a declarative language. The custom models, along with native models, may be combined together to provide custom machine learning (ML) use cases.
Claims21
A method of processing a custom predictive security model comprising:
- retrieving a custom predictive security model definition defining:
- input data from one or more available data sources providing security related information, the input data used in the predictive security model;
- and
- model logic providing a scoring function used to compute a predicted output value from the input data;
- ingesting, from the available data sources, the input data specified in the retrieved custom predictive security model;
- loading the ingested input data into the scoring function of the custom predictive security model;
- and
- outputting a predicted value from the scoring function based on the ingested input data.
A computing system for processing a custom predictive security model comprising:
- a processor for executing instructions;
- a memory storing instructions, which when executed by the processor configure the computing system to:
- retrieve a custom predictive security model definition defining:
- input data from one or more available data sources providing security related information, the input data used in the predictive security mode;
- and
- model logic providing a scoring function used to compute a predicted output value from the input data;
- ingest, from the available data sources, the input data specified in the retrieved custom predictive security model;
- load the ingested input data into the scoring function of the custom predictive security model;
- and
- output a predicted value from the scoring function based on the ingested input data.
A non-transitory computer readable memory, storing instructions, which when executed by a processor of a computing system, configure the computing system to:
- retrieve a custom predictive security model definition defining:
- input data from one or more available data sources providing security related information, the input data used in the predictive security mode;
- and
- model logic providing a scoring function used to compute a predicted output value from the input data;
- ingest, from the available data sources, the input data specified in the retrieved custom predictive security model;
- load the ingested input data into the scoring function of the custom predictive security model;
- and
- output a predicted value from the scoring function based on the ingested input data.
Dependencies are inferred from the claim text.