Invention Grant
- Patent Title: Automated threat alert triage via data provenance
-
Application No.: US16507353Application Date: 2019-07-10
-
Publication No.: US11194906B2Publication Date: 2021-12-07
- Inventor: Ding Li , Kangkook Jee , Zhengzhang Chen , Zhichun Li , Wajih Ul Hassan
- Applicant: NEC Laboratories America, Inc.
- Applicant Address: US NJ Princeton
- Assignee: NEC Laboratories America, Inc.
- Current Assignee: NEC Laboratories America, Inc.
- Current Assignee Address: US NJ Princeton
- Agent Joseph Kolodka
- Main IPC: G06F21/55
- IPC: G06F21/55 ; G06F21/56
Abstract:
A method for implementing automated threat alert triage via data provenance includes receiving a set of alerts and security provenance data, separating true alert events within the set of alert events corresponding to malicious activity from false alert events within the set of alert events corresponding to benign activity based on an alert anomaly score assigned to the at least one alert event, and automatically generating a set of triaged alert events based on the separation.
Public/Granted literature
- US20200042700A1 AUTOMATED THREAT ALERT TRIAGE VIA DATA PROVENANCE Public/Granted day:2020-02-06
Information query
