Patent Document ID: 10104102
Application ID: 15594049
Patent Flag: 1

Claim One:
1. An analytics-based security monitoring system comprising: a hardware processor; at least one memory for storing instructions that are executed by at least the hardware processor to: detect a plurality of behavioral characteristics from behavioral data, each of the plurality of behavioral characteristics representing an action conducted in a computing environment, determine, in accordance with a correlation profile, one or more behavioral fragments each comprising a plurality of the behavioral characteristics, correlate, in accordance with the correlation profile, the one or more determined behavioral fragments against an attack profile comprising a plurality of sets of behavioral fragments where each set of behavioral fragments forms a malicious behavior pattern of a known attack, identify an attack based on the correlated one or more determined behavioral fragments, and updating the correlation profile after an analysis of the identified attack, the correlation profile being used to determine how the one or more behavioral fragments are determined and whether the one or more behavioral fragments are correlated with any of the plurality of sets of behavioral fragments.