Patent ID: 9166999
Filing Date: 2015-10-20
Classification: G06F,G06Q,H04L

Abstract:
1. A computerized method for transaction-based security risk aggregation and analysis, the method comprising: receiving, by a server computing device, security risk data elements from a plurality of data sources, the security risk data elements corresponding to a transaction submitted by a remote computing device to the server computing device for execution; aggregating, by the server computing device, the security risk data elements into a weighted risk matrix; generating, by the server computing device, a risk score for the submitted transaction based upon the weighted risk matrix; determining, by the server computing device, an internal environment risk factor comprising analyzing a first set of other transactions submitted within a first enterprise computing system in which the server computing device is located to determine whether the first set of other transactions comprise one or more of abnormal communications from or to computing devices in the enterprise computing system or execution of unauthorized software within the first enterprise computing system; determining, by the server computing device, an external environment risk factor comprising analyzing a second set of other transactions submitted from a second enterprise computing system that is external to the first enterprise computing system to determine whether the second set of other transactions comprise one or more of cyber attacks against the second enterprise computing system, fraudulent transactions submitted to the second enterprise computing system, or data breaches experienced by the second enterprise computing system; adjusting, by the server computing device, the risk score for the submitted transaction based upon the internal environment risk factor and the external environment risk factor; determining, by the server computing device, a disposition for the transaction based upon the adjusted risk score; storing, by the server computing device, the security risk data elements, the internal environment factor, the external environment factor, and the adjusted risk score in a database; and using, by the server computing device, the stored security risk data elements, the internal environment factor, the external environment factor, and the adjusted risk score to determine a disposition for a future transaction.