Improved method of ranking and address network threats

Abstract

A method of assessing threats to a network may collect existing threats from multiple online sources, collect the existing threats into a database, and format data in the database representing the existing threats for consultation. The method may determine a rating for each of the existing threats, evaluate the attraction of the honeypot to the threats, and adjust the rating of the threats based on the attraction of the honeypot. The method may evaluate applications on the network, rank threats based on the applications, and communicate the rank to the user.

Description

(19) State Intellectual Property Office (12) Invention Patent Application (10) Application Publication Number (43) Application Publication Date (21) Application Number 202480082067.6 (22) Application Date 2024.10.22 (30) Priority Data 18 / 383,796 2023.10.25 US (85) PCT International Application Entering National Phase Date 2026.06.24 (86) PCT International Application Application Data PCT / US2024 / 052423 2024.10.22 (87) PCT International Application Publication Data WO2025 / 090515 EN 2025.05.01 (71) Applicant: Colison Corporation Address: California, USA (72) Inventors: T. Enriquez V. Narayanaswami S. Izmailov (74) Patent Agency: Beijing Liu Shen Law Firm 11105 Patent Attorney Hu Qi (51) Int.Cl. G06F 21 / 55 (2013.01) H04L 9 / 40 (2022.01) G06F 21 / 62 (2013.01) G06F 11 / 00 (2006.01) G06F 21 / 00 (2013.01) (54) Invention Title Improved Method for Ranking Network Threats and Solving Network Threats (57) Abstract A method for assessing threats to a network can collect existing threats from multiple online sources, collect the existing threats into a database, and format the data representing existing threats in the database for easy reference. The method can determine the rating of each of the existing threats, assess the attractiveness of honeypots to threats, and adjust the threat rating based on the attractiveness of honeypots. The method can assess applications on the network, rank threats based on applications, and transmit the rankings to users. Claims (3 pages), Description (8 pages), Drawings (4 pages), CN 122497953 A, 2026.07.31, CN 1 22 49 79 53 A

Claims

1. A method for assessing threats to computer-based networks, comprising: Collect existing threats from multiple online sources; Collect the existing threats into a database; The data representing the existing threats in the database is formatted for easy access; Determine the rating of each of the existing threats; Assess the attractiveness of honeypots to threats; The rating of each of the existing threats is adjusted based on the attractiveness of the honeypot; Determine the threat's ability to access the honeypot; Evaluate applications on the network; The existing threats are ranked based on the applications on the network, using an adjusted rating for each of the existing threats and the ability to access the honeypot. as well as The rankings are then sent to the user.

2. The method of claim 1, further comprising: Send solutions to the network targeting the top-ranked existing threats.

3. The method according to claim 1, wherein, Online sources include at least two of the following: National vulnerability database; Develop a predictive scoring system; exploitDB; GitHub; and Social media accounts.

4. The method according to claim 1, wherein, Formatting the data representing the existing threats in the database for easy access includes representing the existing threats in numerical form.

5. The method according to claim 1, wherein, Adjusting the rating of each of the existing threats based on the attractiveness of the honeypot includes: Set up a honeypot, and Determine the number of threats that access the honeypot over a period of time.

6. The method according to claim 5, wherein, The method further includes: Determine the origin of the threat; Store the origin; The origins were compared across multiple honeypots; and The origins are ranked based on the number of honeypots visited.

7. A tangible, non-transitory computer-readable medium comprising computer-executable instructions for assessing threats to a network, the computer-executable instructions including instructions for configuring at least one hardware processor to perform the following operations: Collect existing threats from multiple online sources; Collect the existing threats into a database; The data representing the existing threats in the database is formatted for easy access; Determine the rating of each of the existing threats; Assess the attractiveness of honeypots to threats; The rating of each of the existing threats is adjusted based on the attractiveness of the honeypot; Determine the threat's ability to access the honeypot; Evaluate applications on the network; The existing threats are ranked based on the applications on the network, using an adjusted rating for each of the existing threats and the ability to access the honeypot. as well as The rankings are then sent to the user.

8. The computer-readable medium of claim 7 further includes computer-executable instructions for transmitting to the network solutions to the highest-ranking existing threats.

9. The computer-readable medium according to claim 7, wherein, Online sources include at least two of the following: National vulnerability database; Develop a predictive scoring system; exploitDB; GitHub; and Social media accounts.

10. The computer-readable medium according to claim 7, wherein, Formatting the data representing the existing threats in the database for easy access includes representing the existing threats in numerical form.

11. The computer-readable medium according to claim 7, wherein, Adjusting the threat rating based on the attractiveness of the honeypot includes: Setting up a honeypot; and Determine the number of threats that access the honeypot over a period of time.

12. The computer-readable medium of claim 7, further comprising computer-executable instructions for performing the following operations: Determine the origin of the threat; Store the origin; The origins were compared across multiple honeypots; and The origins are ranked based on the number of honeypots visited.

13. A computer system comprising a hardware processor, a memory, and input-output circuitry, the hardware processor being physically configured according to computer-executable instructions for assessing threats to a network, the computer-executable instructions including instructions for performing the following operations: Collect existing threats from multiple online sources; Collect the existing threats into a database; The data representing the existing threats in the database is formatted for easy access; Determine the rating of each of the existing threats; Assess the attractiveness of honeypots to threats; The rating of each of the existing threats is adjusted based on the attractiveness of the honeypot; Determine the threat's ability to access the honeypot; Evaluate applications on the network; The existing threats are ranked based on the applications on the network, using an adjusted rating for each of the existing threats and the ability to access the honeypot. as well as The rankings are then sent to the user.

14. The computer system of claim 13, wherein the computer-executable instructions further include instructions for transmitting to the network a solution to the highest-ranking existing threat.

15. The computer system according to claim 13, wherein, Online sources include at least two of the following: National vulnerability database; Develop a predictive scoring system; exploitDB; GitHub; and Social media accounts.

16. The computer system according to claim 13, wherein, Formatting the data representing the existing threats in the database for easy access includes representing the existing threats in numerical form.

17. The computer system according to claim 13, wherein, Adjusting the threat rating based on the attractiveness of the honeypot includes: Set up a honeypot; Determine the number of threats that access the honeypot over a period of time; Determine the origin of the threat; Store the origin; The origins were compared across multiple honeypots; and The origins are ranked based on the number of honeypots visited.

Images