Patent Document ID: 9661003
Application ID: 13893247
Patent Flag: 1

Claim One:
1. A method of analyzing a cyber-attack, comprising: collecting attack data from sensor nodes, wherein each sensor node comprises a first processor, and wherein the attack data comprises data associated with a cyber-attack; transmitting the attack data from the first processor to at least a second processor; extracting quantitative data from the attack data using the at least second processor, wherein the extracted quantitative data (“EQD”) comprises data related to a plurality of metrics associated with a cyber-attack that is used to profile a behavior of a human entity or entities (“Adversary”); comparing the EQD with a database of existing adversary and attack data (“AAD”) using the at least second processor, wherein the AAD comprises data associated with metrics of known adversaries and known adversary behavior; and determining, using the at least second processor, if the EQD is associated with a known adversary and/or known adversary behavior based on the comparison step; wherein the metrics associated with the cyber-attack and the metrics of known adversaries and known adversary behavior are associated with at least one predetermined category, wherein the at least one predetermined category comprises at least an adversary sophistication level determined by analysis of codes in the attack data (“attack codes”) to determine the sophistication level of the attack codes.