Patent Document ID: 8689336
Application ID: 12891229
Patent Flag: 1

Claim One:
1. A method for real-time threat monitoring, the method comprising: identifying, by a processing device, two or more real time vulnerabilities, each associated with one or more objects of an enterprise; correlating, by the processing device, the two or more real-time vulnerabilities to each other, thereby resulting in a correlated real-time vulnerability; applying, by the processing device, an exposure tiering model to the correlated real-time vulnerability, thereby classifying the correlated real-time vulnerability into one or more of a plurality of exposure tiers based at least in part on whether the correlated real-time vulnerability is associated with exposure of non-public information and whether the correlated real-time vulnerability is associated with exposure originating external to the enterprise, wherein the exposure tiering model comprises a first tier having a first priority of action, a second tier having a second priority of action, a third tier having a third priority of action and a fourth tier having a fourth tier having a fourth priority of action, wherein: the correlated real-time vulnerability is applied to the first tier if it is associated with non-public information and is associated with exposure originating external to the enterprise; the correlated real-time vulnerability is applied to the second tier if it is not associated with non-public information and is associated with exposure originating external to the enterprise; the correlated real-time vulnerability is applied to the third tier if it is associated with non-public information and is not associated with exposure originating external to the enterprise; the correlated real-time vulnerability is applied to the fourth tier if it is not associated with non-public information and is not associated with exposure originating external to the enterprise; and the first priority of action is greater than each of the second priority of action, the third priority of action and the fourth priority of action; and the method further comprising: initiating, by the processing device, an alert based at least in part on the correlated real-time vulnerability and the one or more exposure tiers into which the correlated real-time vulnerability is classified.