US 2021/0273950 A1 · METHOD AND SYSTEM FOR DETERMINING AND ACTING ON A STRUCTURED DOCUMENT CYBER THREAT RISK

Abstract

A cyber defense system using machine learning models trained on the classification of structured documents, such as emails, in order to identify a cyber threat risk of the incoming or outgoing structured document and to cause one or more autonomous actions to be taken in relation to the structured document based on a comparison of a category the structured document is classified with, a score associated with the classification and a threshold score. For incoming structured documents, the autonomous actions of the cyber defense system may act to contain a malign nature of identified incoming structured documents. For outgoing structured documents, the autonomous actions of the cyber defense system may act to prevent the structured document from being sent to an unintended recipient.

Claims20

Dependent claims

An apparatus for determining and acting on a cyber threat risk of a structured document addressed to a recipient by a sender, the apparatus comprising:

one or more machine learning models that are trained on the classification of structured documents with one or more of a plurality of categories based on a plurality of characteristics of the structured documents;
a classifier configured to receive a structured document for analysis and to parse the structured document to extract the plurality of characteristics of the structured document;
wherein the classifier is further configured to classify the structured document with one or more of the plurality of categories based on the extracted plurality of characteristics and the one or more machine learning models, and to determine an associated score for the classification;
and
an autonomous response module configured to, based on a comparison of the associated score with a threshold, cause one or more autonomous actions to be taken in relation to the structured document.

2 more elements

A computer implemented method for determining and acting on a cyber threat risk of a structured document addressed to a recipient by a sender, the method comprising:

using one or more machine learning models that are trained on the classification of structured documents with one or more of a plurality of categories based on a plurality of characteristics of the structured documents;
receiving, at a classifier, a structured document for analysis and parsing the structured document to extract the plurality of characteristics of the structured document;
classifying, at the classifier, the structured document with one or more of the plurality of categories based on the extracted plurality of characteristics and the one or more machine learning models, and determining an associated score for the classification;
and
causing, by an autonomous response module, one or more autonomous actions to be taken in relation to the structured document based on a comparison of the associated score with a threshold.

2 more elements

Dependencies are inferred from the claim text.

Method and system for determining and acting on a structured document cyber threat risk

Life of this patent

Method and system for determining and acting on a structured document cyber threat risk

Life of this patent

Abstract

Claims20