Patent Document ID: 9807109
Application ID: 15337120
Patent Flag: 1

Claim One:
1. A computer implemented method of profiling cyber threats detected in a target environment, comprising: receiving, from a Security Information and Event Manager (SIEM) monitoring the target environment, alerts triggered by a detected potential cyber threat, and, for each alert: retrieving, by at least one computer processor, captured packet data related to the alert; extracting, by the at least one computer processor, data pertaining to a set of attributes from captured packet data triggering the alert; applying, by the at least one computer processor, fuzzy logic to data pertaining to one or more of the attributes to determine values for one or more output variables indicative of a level of an aspect of risk attributable to the cyber threat; wherein the fuzzy logic comprises one or more rule bases comprising fuzzy rules and being usable to evaluate a CT risk indicator, and wherein each fuzzy rule of a rule base has: as an antecedent, a fuzzy set of one or more input fuzzy variables each representative of a said attribute and any logical operators connecting input fuzzy variables, and as a consequent, a fuzzy set of an output fuzzy variable representative of the CT risk indicator.