Method and system for prioritization of alerts

A computing apparatus for prioritizing alerts that relate to security events, the computing apparatus comprising:

• a processor;
• a memory;
• and
• a communication interface coupled to each of the processor and the memory,
• wherein the processor is configured to:
• receive, via the communication interface, a first alert;
• provide, to a first model that is trained by using historical data relating to prior alerts, the first alert;
• generate, using the first model, a first prioritization score that relates to the first alert;
• determine, based on the first prioritization score, whether to prioritize the first alert by placing the first alert at a top portion of a queue of alerts received within a predetermined time frame;
• and
• transmit, via the communication interface to a user that is responsible for responding to the first alert, an updated version of the queue of alerts that includes the first alert in conjunction with the first prioritization score.

A non-transitory computer readable storage medium storing instructions for prioritizing alerts that relate to security events, the storage medium comprising executable code which, when executed by a processor, causes the processor to:

• receive a first alert;
• provide, to a first model that is trained by using historical data relating to prior alerts, the first alert;
• generate, using the first model, a first prioritization score that relates to the first alert;
• determine, based on the first prioritization score, whether to prioritize the first alert by placing the first alert at a top portion of a queue of alerts received within a predetermined time frame;
• and
• transmit, to a user that is responsible for responding to the first alert, an updated version of the queue of alerts that includes the first alert in conjunction with the first prioritization score.