Patent ID: 11936666
Assignee: MUSARUBRA US LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 8:
9. A non-transitory computer-readable medium to determine whether a network, including a plurality of endpoint devices, is undergoing a cyber-attack, the non-transitory computer-readable medium including instructions that, when executed, cause execution of software components comprising:
correlation logic configured to generate correlation results based on (i) a combination of monitored features including a first set of features associated with a first object included as part of inbound network traffic detected at a periphery of the network and generated based on analytics of the first object by a malware detection system and a second set of features generated based on analytics of the first object by one or more endpoint devices and (ii) a third set of features exhibited by a known malware or a known malware family;
a classification engine configured to generate classification results by determining, at least based on the correlation results provided by the correlation logic, whether the first object is classified as a malicious object being part of the cyber-attack; and
a risk analyzer configured to receive the classification results when the first object is classified by the classification engine as a malicious object and correlate the combination of monitored features with information associated with properties associated with each of the plurality of endpoint devices, different than the malware detection system, to generate at least a risk profile for each of the plurality of endpoint devices,
wherein each risk profile identifies whether a corresponding endpoint device is vulnerable to the cyber-attack.