Patent ID: 11949696
Assignee: BANK OF AMERICA CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A system, comprising:
a deployment repository comprising a first memory configured to store operating system deployments indicating configurations of one or more operating systems that are configured to be executed by endpoint devices;
an endpoint device executing a deployed operating system, the endpoint device configured to record one or both of modifications to the deployed operating system and usage of the deployed operating system; and
a security assessment and intervention system comprising:
a network interface configured to receive:
baseline deployment properties of the operating system deployments stored by the deployment repository; and
endpoint deployment properties of the deployed operating system executed by the endpoint device, wherein the endpoint deployment properties comprise one or more of the modifications to the deployed operating system recorded by the endpoint device and the usage of the deployed operating system recorded by the endpoint device;

a second memory operable to store an artificial intelligence model configured to determine a security response based at least in part on the endpoint deployment properties of the endpoint device; and
a processor communicatively coupled to the network interface and the second memory and configured to:
determine, by providing the endpoint deployment properties to the artificial intelligence model, a mismatch value corresponding to an amount that the endpoint deployment properties are different than the baseline deployment properties;
determine, based on the mismatch value, an action to improve security of the deployed operating system executed by the endpoint device; and
execute the determined action to improve security of the deployed operating system.