Patent ID: 8839349
Filing Date: 2014-09-16
Classification: G06F,H04L

Abstract:
1. At least one non-transitory machine accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to: identify a plurality of security events detected in a computing system, each security event in the plurality of security events based on at least one policy in a plurality of security policies defined for the computing system; present a first representation of the plurality of security events in an interactive graphical user interface, wherein the first representation of the plurality of security events includes a plurality of selectable event elements, each event element representing at least one security event in the plurality of security events; receive, via the interactive graphical user interface, a user selection of a particular event element presented in the first representation; identify a subset of the plurality of security policies, each security policy in the subset serving as a basis for at least one particular security event represented by the particular event element; and present, in the interactive graphical user interface, based on the user selection, a listing of the subset of security policies based on the user selection of the particular event element.