Patent ID: 11863568
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 13:
14. One or more computer-readable media storing computer-executable instructions that, when executed, cause one or more processors to perform acts comprising:
training at least one model based at least in part on interactions between one or more users and electronic messages sent to addresses associated with the one or more users, the at least one model being trained to output susceptibility scores indicating likelihoods that the one or more users are to fall victim to malicious electronic messages;
receiving a first electronic message sent to a first address associated with a first user;
analyzing the first electronic message to generate first feature data based at least in part on text obtained from a natural-language-processing (NLP) analysis of the first electronic message;
determining one or more characteristics of the first user to generate second feature data;
inputting, to the at least one model, the first feature data and the second feature data;
receiving a plurality of susceptibility scores comprising:
receiving, as output of the at least one model, a first susceptibility score indicating a likelihood that the first user is to fall victim to malicious data included in the first electronic message based at least in part on past behavior of the first user; and
receiving a second susceptibility score indicating a likelihood that the first user is to fall victim to malicious data included in the first electronic message based at least in part on past behaviors of a group of users with which the first user is associated; and

outputting, to the first user, a warning regarding the first electronic message based at least in part on the first susceptibility score and the second susceptibility score.