Patent ID: 11909759
Assignee: RAPID7, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method comprising:
executing, by one or more processors, instructions stored on memory, the execution comprising:
generating an organizational statistical model describing assets associated with a first organization, wherein the organizational statistical model includes at least one cluster associated with a plurality of assets of a first type and designates a benchmark asset of the at least one cluster that is closest to a centroid of the at least one cluster;
identifying an asset of the first type based on a discrepancy between the identified asset and the benchmark asset;
generating, via a user interface, a report identifying the identified asset for review; and
responsive to user feedback received via the user interface, initiating a threat mitigation procedure on the identified asset, wherein the mitigation procedure includes one or more of placing the identified asset on a blacklist, monitoring the identified asset for malicious, and quarantining the identified asset.