Campaign intelligence and visualization for combating cyberattacks

US11902299B2 · kind B2 · utility

Assignee

• MICROSOFT TECHNOLOGY LICENSING, LLC · US

Inventors

• Mihai Costea · Redmond, US
• Michael Abraham Betser · Kirkland, US
• Ravi Kiran Reddy Poluri · Redmond, US
• Hua Ding · Redmond, US
• Weisheng Li · Chongqing, CN
• Phanindra Pampati · Sammamish, US
• David Nicholas Yost · Redmond, US

Key dates

• Filing date: Nov 3, 2020
• Grant date: Feb 13, 2024
• Expiry date: Dec 9, 2040

Classification

• Technology area (CPC —): General

Abstract

Methods, systems, and computer storage media for providing a multi-attribute cluster-identifier that supports identifying malicious activity in computing environments. An instance of an activity having an attribute set can be assessed. The attribute set of the instance of the activity is analyzed to determine whether the instance of the activity is a malicious activity. The attribute set of the instance of the activity is compared to a plurality of multi-attribute cluster-identifiers of previous instances of the activity, such that, a determination that the instance of the activity is a malicious activity is made when the attribute set of the instance of the activity corresponds to an identified multi-attribute cluster-identifier. The identified multi-attribute cluster-identifier has a risk score and an attribute set that indicate a likelihood that the instance of the activity is a malicious activity. A visualization that identifies the instance of the activity as a malicious activity is generated.