PROVIDING CONTEXT ASSOCIATED WITH A POTENTIAL SECURITY ISSUE FOR AN ANALYST

• Main Authors: NEUVIRTH, Hani Hana, MATUSKA, Larry J, LIVNY, Yotam, HOLLIS, William K, MADDERLA, Sangeetha, CHKODROV, Gueorgui
• Format: Patent
• Language: English; French; German
• Published: 03.01.2024
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

Disclosed herein is a system for generating and displaying information useful to help a security analyst understand a scale and a root cause of a potential security issue associated with a resource. The resource can include a server, a storage device, a user device (e.g., a personal computer, a tablet computer, a smartphone, etc.), a virtual machine, networking equipment, etc. The resource may be one that is under control of an entity operating a security operations center. Additionally or alternatively, the resource may be one that is configured to be monitored by the security operations center. The information provides the security analyst with a broader context of the potential security issue based on relationships between the potential security issues and other security issues. Consequently, the information enables the security analyst to implement more efficient and effective actions to handle the potential security issue.