Patent ID: 11888883
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method for threat disposition analysis, comprising:
responsive to receipt of a security threat identified in an alert, retrieving a threat disposition score (TDS), the threat disposition score generated from a machine learning scoring model built from information about historical security threats, including historical disposition of one or more alerts associated with the historical security threats, the TDS based in part on an effectiveness of a prior calculated TDS to predict a particular historical disposition associated with the alert;
augmenting the alert to include the threat disposition score to generate an enriched alert; and
presenting the enriched alert for further handling;
wherein the historical disposition of at least one alert comprises feedback from a second security analyst on handling of the at least one alert by a first security analyst.