Patent ID: 11888883
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 24:
25. A security threat analysis platform, comprising:
one or more hardware processors;
a data store holding a knowledge base of alert data, and historical alert disposition handling information; and
computer memory storing computer program instructions configured to;
compute a scoring model by applying machine learning to information derived from the knowledge base, the information including historical security threats, including historical disposition of one or more alerts associated with the historical security threats;
respond to receipt of a new security threat, using the scoring model to generate an alert having an associated threat disposition score and confidence level, the threat disposition score based in part on an effectiveness of a prior calculated threat disposition score to predict a particular historical disposition associated with the alert;
receive and respond to handling information for the alert;
wherein the historical disposition of the alert comprises feedback from a second security analyst on handling of the alert by a first security analyst.