Scoring confidence in user compliance with an organization's security policies
US11310282B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | May 20, 2021 |
| Grant date | Apr 19, 2022 |
| Priority date | — |
| Expiry date | May 20, 2041 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/08
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The disclosed technology teaches a method for evaluating user compliance with an organization's security policies, formulating a user confidence or risk score, comprising scoring for each user a sum of alert weights, categorized by severity, and generated over time. Each contribution to an alert weight is generated due to an activity by the user that the organization's security policies treat as risky. Alert weights, over time, are subject to a decay factor that attenuates the alert weights as time passes. Also disclosed is reporting the user confidence score, comprising causing display of a time series of the user confidence or risk scores over a predetermined time and/or a current user confidence or risk score and/or at least some details of the activity by the user that contributed to the alert weights over time.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.