Tiered exposure model for event correlation
US8689336B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Sep 27, 2010 |
| Grant date | Apr 1, 2014 |
| Priority date | — |
| Expiry date | Oct 8, 2031 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1416
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A method for real-time threat monitoring includes identifying two or more real time vulnerabilities, each associated with one or more objects of an enterprise, correlating the two or more real-time vulnerabilities to each other, applying an exposure tiering model to the correlated real-time vulnerability, thereby classifying the correlated real-time vulnerability into risk tiers, and initiating an alert based on the correlated real-time vulnerability and the exposure tiers into which the correlated real-time vulnerability is classified. According to other embodiments a method includes applying an exposure methodology to log data contained in one or more object logs thereby identifying one or more security events, applying an exposure tiering model to the one or more security events, thereby classifying the security events into exposure tiers, and initiating an alert based on the security events and the exposure tiers into which the security events are classified.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.