Patent ID: 9584536
Date: 2017-02-28
CPC Classifications: H04L

Claim:
1. A method comprising: maintaining, by a computing device, threat information in a database comprising one or more of firewall logs and historical threat logs; receiving information regarding a plurality of threat filtering parameters, by the computing device, wherein the information includes one or more of types of threats to be extracted from the database, parameters of the threats, network-level details of the threats, a time interval of detection of the threats and source-destination details of the threats; extracting, by the computing device, information regarding a plurality of threats from the database based on the plurality of threat filtering parameters; and presenting, by the computing device, the extracted information in a form of a historical graph illustrating a number of threats by type during a particular period of time; and receiving from a user, by the computing device, an indication regarding a selected subset of the particular period of time in which to zoom into for further details; and responsive to the indication regarding the selected subset, presenting, by the computing device, the further details in a form of a list of threats of the plurality of threats corresponding to the selected subset, wherein the list of threats is presented in tabular form, grouped and counted by type of threat and ordered by group in accordance with associated risk levels of the threats in the list of threats.