Automated security incident handling in a dynamic environment

US10657469B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Steven A. Bade · Georgetown, US
• Heather M. Hinton · Austin, US
• Neil I. Readshaw · Gold Coast, AU
• Srinivas B. Tummalapenta · Broomfield, US

Key dates

• Filing date: Apr 11, 2014
• Grant date: May 19, 2020
• Expiry date: Oct 9, 2035

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q10/063
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

In a method for estimating a severity of a current security incident reported by a customer for the customer's computer system, a processor receives from one or more administrators for a plurality of prior security incidents reported by the customer, identifications of a respective plurality of actual severities for the plurality of prior security incidents. The processor estimates, based in part on the plurality of identified actual severities of the prior security incidents, a severity of the current security incident. The processor reports the estimated severity for the current security incident.