Patent ID: 11949700
Assignee: FORCEPOINT LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. A system comprising:
a processor;
a data bus coupled to the processor; and
a non-transitory, computer-readable storage medium embodying computer program code for performing a security operation, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
monitoring a plurality of electronically-observable actions of an entity, the plurality of electronically-observable actions of the entity corresponding to a respective plurality of events enacted by the entity;
identifying a security related activity of the entity from the plurality of events enacted by the entity, the security related activity being of analytic utility;
generating an event severity risk score based upon the security related activity of the entity;
generating an entity risk severity score for the entity, the generating using the event risk severity score;
accessing an entity behavior catalog based upon the security related activity, the entity behavior catalog providing an inventory of entity behaviors; and,
performing the security operation via a security analytics system, the security operation using the entity risk severity score entity and the behavior catalog data stored within the entity behavior catalog based upon the security related activity, the security analytics system executing on a hardware processor.