Patent ID: 11936685
Assignee: CLOUD LINUX SOFTWARE INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method for blocking an attack vector, the method comprising:
detecting a security incident associated with a potential attack vector on a web server, wherein the potential attack vector is a path taken by a malicious entity to gain access to the web server;
recording, in a database, a first report comprising a timestamp of the security incident and an identifier of the security incident;
detecting a consequential event comprising one of: an unauthorized change in a database on the web server, a malware upload, or a subsequent security incident related to an attack vector;
recording, in the database, a second report comprising a timestamp associated with the consequential event and an identifier of the consequential event;
in response to determining that the first report and the second report have a common identifier and timestamps:
identifying a combination of the security incident and the consequential event as an attack vector;
generating a first rule that blocks the consequential event in response to detecting the security incident; and
blocking, based on the first rule, any consequential events in response to detecting the security event on the web server that involve the identifier of the security incident.