Patent Document ID: 20120233098
Application ID: 13045865
Patent Status: 0

Claim One:
1. A multiple hypothesis cyber security tracking method for tracking observations, the method comprising: receiving observations associated with cyber sensor data signals from a plurality of cyber-domain types; distributing each of the observations to one or more association engines, wherein each association engine is configured for a particular domain type and each association engine manages zero or more preexisting tracks of observations; associating each of the observations with a) the one or more preexisting tracks, or b) a newly generated track to generate an updated set of tracks; sending the updated set of tracks with track quality scores for each track to a domain agnostic hypothesis manager; updating a track hypothesis model of the domain agnostic hypothesis manager with the updated set of tracks; determining a probability estimate for each track in the track hypothesis model and selecting a hypothesis for each cluster of related tracks stored in the track hypothesis model that satisfies a predetermined cluster condition; sending the probability estimate for each track in the track hypothesis model and the selected hypothesis for each cluster of tracks to the one or more association engines to update track information in the one or more association engines; and sending the updated track information with cyber-domain specific information to an entity collector module for distribution to a recipient processor.