Patent Document ID: 9749343
Application ID: 14244884
Patent Flag: 1

Claim One:
1. A security system, comprising: a computer system; a memory accessible to the computer system; a data store comprising a cyber threat intent dictionary and a technology dictionary; an application stored in the memory that, when executed by the computer system: generates a cyber threat report for one or more cyber threats based on user inputs, wherein the report comprises an identification of a cyber threat intent and an identification of a cyber threat technology associated with a cyber threat, wherein the cyber threat intent is selected from a plurality of cyber threat intents listed in the cyber threat intent dictionary, and wherein the cyber threat technology is selected from the technology dictionary, and populates a cyber threat progression vector for each of a plurality of different cyber threats comprising a plurality of predefined elements that each correspond to a step of a plurality of separate steps that are taken in carrying out a corresponding cyber threat of the plurality of different cyber threats, the cyber threat progression vectors having the same predefined elements with values corresponding to one of present or not present but with a different value in at least one of the plurality of pre-defined elements, wherein the cyber threat progression vector for the corresponding cyber threat comprises one or more predefined elements of the plurality of predefined elements with a value corresponding to not present in the corresponding cyber threat, wherein the cyber threat report and the cyber threat progression vectors are used to select cyber risk mitigation actions to manage cyber risks of an enterprise or organization, wherein a first cyber threat of the plurality of different cyber threats is interdicted at at least a first step of the plurality of steps corresponding to a predefined element of the plurality of predefined elements on the cyber threat progression vector for the first cyber threat having a value corresponding to present for the first cyber threat, and wherein a second cyber threat of the plurality of different cyber threats is interdicted at at least a different step than the first step corresponding to a predefined element of the plurality of predefined elements on the cyber threat progression vector for the second cyber threat having a value corresponding to present in the second cyber threat; and a computer system interface to provide the report and the cyber threat progression vectors.