Patent ID: 8739290
Filing Date: 2014-05-27
Classification: G06F,H04L

Abstract:
1. A method for generating alerts in an event management system, wherein the event management system comprises an event management device and a risk assessment device, the method comprising: receiving, in the event management device, data related to events associated with at least one asset in a network environment; in response to receiving the data, determining, in the event management device, an alert in connection with an event associated with at least one asset in the network environment; filtering, in the event management device, the received data in order to facilitate creation of an input for the risk assessment device, wherein the input comprises information relating to the alert; forwarding, from the event management device to the risk assessment device, the input; determining, in the risk assessment device, a new score indicative of risk based on the input and an old risk score associated with the alert; forwarding, from the risk assessment device to the event management device, the new score indicative of risk; receiving, in the event management device, the new score indicative of risk; and in response to receiving the new score indicative of risk, generating, in the event management device, a score chart that enables the identification of the most likely threat based on score.