公开(公告)号：US10511623B2

公开(公告)日：2019-12-17

申请号：US15146813

申请日：2016-05-04

Applicant: Netflix, Inc.

Inventor： William D. Burns ,  Robert Fry

IPC: H04L29/06 ,  H04L12/24 ,  H04L9/00 ,  G06F11/30 ,  G06F12/14

Abstract: A data processing method comprising obtaining a plurality of computer network security threat feeds from two or more computer threat detection systems; based upon computer network attack information in the computer network security threat feeds, determining a threat score that represents a severity of an actual or suspected attack on a particular host in a computer network; obtaining an asset value for the particular host that indicates a worth of the particular host, and updating the threat score based upon the asset value; mapping the updated threat score to one of a plurality of remediation actions, wherein a first remediation action is mapped when the updated threat score is low and a second, different remediation action is mapped when the updated threat score is high; based upon the updated threat score and the mapping, selecting and automatically performing one of the plurality of remediation actions on the particular host; wherein the method is performed by one or more special-purpose computing devices.