Moderator system for a security analytics framework
AssigneeArm Limited
InventorsSubbayya Chowdary YANAMADALA, Jeremy Patrick DUBEUF, Carl Wayne VINEYARD, Matthias Lothar BOETTCHER, Hugo John Martin VINCENT, Shidhartha DAS
Life of this patent
Estimating the term…
Abstract
A moderator system that can receive outputs of various stages of the security analytic framework and can receive input from external sources to provide information about emerging styles of attacks. One or more models/behavioral profiles can be curated by the moderator system, and the moderator system can provide updates to components of the security analytics framework.
Claims20
A method to provide moderation to a security analytics framework, the method comprising:
- sending a first model to a risk predictor for a system, wherein the first model includes context information for a particular application of the system;
- receiving operational data from the system;
- performing training on one or more stored models including the first model using the received operational data to generate at least a second model;
- sending the second model to at least the risk predictor;
- determining whether to make an adjustment to a security configuration of the system based on at least the received operational data;
- determining a particular security configuration for the system based on at least the received operational data;
- and
- sending the particular security configuration to at least one component of the system.
A moderator system to moderate a security analytics framework, the system comprising:
- a moderator controller;
- an interface for communicating with components of the security analytics framework, the components comprising a data scavenger, a data analyzer;
- and a risk predictor;
- a data resource storing one or more models of particular operations of a system;
- and
- a training module that trains the one or more models based on received operational data from at least the system.
Dependencies are inferred from the claim text.