Patent ID: 8438644

Claim:
A security system, comprising: a computer system; a memory accessible to the computer system; a data store comprising a threat catalog, wherein the threat catalog comprises a plurality of threat vectors, wherein each threat vector of the plurality of threat vectors comprises a plurality of fields, wherein the plurality of fields comprise at least a technology field that identifies a tool employed to actuate a threat, a geography field that identifies a region where the threat was actuated, an actor field that identifies an attacker, and an attack type field that identifies a type of security attack, and wherein each field of the plurality of fields is constrained to carry a value selected from a predefined list of enumerated values; and an application stored in the memory that, when executed by the computer system, receives a threat report, wherein the threat report comprises an identification of at least one threat vector, wherein the at least one threat vector comprises at least the technology field, the geography field, the actor field, and the attack type field, and wherein each of the technology field, the geography field, the actor field, and the attack type field is constrained to carry a value selected from the defined list of enumerated values, determines a correlation between the at least one threat vector received in the threat report with the plurality of threat vectors comprising the threat catalog by comparing the values of the technology field, the geography field, the actor field, and the attack type field for the at least one threat vector received in the threat report to the corresponding values of the technology field, the geography field, the actor field, and the attack type field for the plurality of threat vectors comprising the threat catalog, when the correlation exceeds a predefined threshold, sends a notification to a stakeholder in an organization under the protection of the security system.