Patent ID: 11934535
Assignee: PROOFPOINT, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 14:
15. A computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor for:
sending a query containing keywords to a content database;
receiving unstructured content items from the content database, each of the unstructured content items containing the keywords;
determining topics based on the unstructured content items received from the content database;
clustering, based at least on the topics, the unstructured content items into a plurality of clusters;
determining a cluster of interest from the plurality of clusters based at least in part on a percentage of vetted cybersecurity phrases in each of the unstructured content items received from the content database, wherein the cluster of interest has a higher percentage of the vetted cybersecurity phrases than the rest of the plurality of clusters;
determining whether the cluster of interest meets or exceeds a predetermined threshold representing a desired level of precision in terms of a number of unstructured content items in the cluster of interest as measured against a number of unstructured content items received from the content database; and
responsive to the cluster of interest meeting or exceeding the predetermined threshold, storing the query as a classifier rule in a rules database such that a cybersecurity classifier is able to classify unstructured social content using the classifier rule generated based on the query.