Patent ID: 11928631
Assignee: SOPHOS LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 6:
7. A method comprising:
providing a valuation model for automatically estimating a business value of a file, wherein providing the valuation model includes creating a model to estimate the business value based on a training set of files each having a known business value, wherein the business value is based on at least one of a file location and an access control list;
analyzing a plurality of files within an enterprise network for a threat level using an integrative model based on one or more of behavioral tags, executable file paths, and Uniform Resource Locators;
identifying one or more intermediate threats associated with the plurality of files that are not within a predetermined confidence level of safe or malicious according to the integrative model;
determining an estimated business value for each of the one or more intermediate threats using the valuation model;
ranking the one or more intermediate threats for presentation within a user interface based on a combination of a likelihood of maliciousness determined according to the integrative model and the estimated business value determined according to the valuation model; and
presenting the one or more intermediate threats to a user in the user interface for human evaluation.