首页>
外国专利>
Computer-implemented method for determining computer system security threats, security operations center system and computer program product
Computer-implemented method for determining computer system security threats, security operations center system and computer program product
展开▼
机译:确定计算机系统安全威胁的计算机实现的方法,安全运营中心系统和计算机程序产品
展开▼
页面导航
摘要
著录项
相似文献
摘要
A computer-implemented method for determining computer system security threats, the computer system including user accounts established on the computer system, the method including the steps of: (i) for a plurality of user accounts, assigning a risk level to each account; (ii) in a time interval, for a plurality of events, wherein each event is linked to a respective user account, assigning an event score relating to deviation from normal behavior of each event with respect to the respective user account; (iii) in the time interval, for the plurality of events, calculating an event importance which is a function of the respective event score and the respective user account risk level; (iv) prioritizing the plurality of events by event importance, and (v) providing a record of the plurality of events, prioritized by event importance.
展开▼