Threat mitigation system and method

HK40137785APending Publication Date: 2026-09-18RELIAQUEST HOLDINGS LLC
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
HK62026125517
Authority / Receiving Office
HK · HK
Patent Type
Applications
Current Assignee / Owner
Priority Date
2023-02-23
Filing Date
2026-06-30
Publication Date
2026-09-18
Estimated Expiration
2044-02-22

Smart Images

  • Figure 00000000_0000_ABST
    Figure 00000000_0000_ABST
Patent Text Reader

Abstract

A computer-implemented method, computer program product and computing system for maintaining a model repository that defines a plurality of AI models; establishing connectivity with a plurality of security-relevant subsystems within a computing platform; receiving an initial notification of a security event from one of the security-relevant subsystems, wherein the initial notification includes a computer-readable language portion that defines one or more specifics of the security event; and selecting a generative AI model for processing the initial notification of the security event from the plurality of AI models defined within the model repository, thus defining a selected generative AI model.
Need to check novelty before this filing date? Find Prior Art

Description

Abstract A computer-implemented method, computer program product, and computing system are used to maintain a model repository defining multiple artificial intelligence models; establish connections with multiple security-related subsystems within a computing platform; receive an initial notification of a security event from one of the security-related subsystems, wherein the initial notification includes a computer-readable language portion defining one or more specific details of the security event; and select a generative artificial intelligence model from the multiple artificial intelligence models defined in the model repository to handle the initial notification of the security event, thereby determining the selected generative artificial intelligence model.

Claims

Attorney Docket No.122680.200PCT7 What Is Claimed Is: Model Registry 1. A computer-implemented method executed on a computing device comprising: maintaining a model repository that defines a plurality of AI models; establishing connectivity with a plurality of security-relevant subsystems within a computing platform; receiving an initial notification of a security event from one of the security-relevant subsystems, wherein the initial notification includes a computer-readable language portion that defines one or more specifics of the security event; and selecting a generative AI model for processing the initial notification of the security event from the plurality of AI models defined within the model repository, thus defining a selected generative AI model.

2. The computer-implemented method of claim 1 wherein receiving an initial notification of a security event from one of the security-relevant subsystems includes: receiving the initial notification of the security event from an agent executed on one of the security-relevant subsystems.

3. The computer-implemented method of claim 1 further comprising: processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification.

4. The computer-implemented method of claim 3 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes:Attorney Docket No.122680.200PCT7 processing the initial notification using the selected generative AI model, the formatting script and / or one or more tools to produce the summarized human-readable report for the initial notification.

5. The computer-implemented method of claim 4 wherein the one or more tools includes one or more of: a decoding tool to decode an encoded initial notification; a decompression tool to decompress a compressed initial notification; and an identification tool to identify an owner of a domain associated with the initial notification.

6. The computer-implemented method of claim 3 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: processing the initial notification using a large language model.

7. The computer-implemented method of claim 3 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: utilizing prompt engineering to produce the summarized human- readable report for the initial notification.

8. The computer-implemented method of claim 3 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: utilizing several loops and / or nested loops to produce the summarized human-readable report for the initial notification.Attorney Docket No.122680.200PCT7 9. A computer program product residing on a computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising: maintaining a model repository that defines a plurality of AI models; establishing connectivity with a plurality of security-relevant subsystems within a computing platform; receiving an initial notification of a security event from one of the security-relevant subsystems, wherein the initial notification includes a computer-readable language portion that defines one or more specifics of the security event; and selecting a generative AI model for processing the initial notification of the security event from the plurality of AI models defined within the model repository, thus defining a selected generative AI model.

10. The computer program product of claim 9 wherein receiving an initial notification of a security event from one of the security-relevant subsystems includes: receiving the initial notification of the security event from an agent executed on one of the security-relevant subsystems.

11. The computer program product of claim 9 further comprising: processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification.

12. The computer program product of claim 11 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes:Attorney Docket No.122680.200PCT7 processing the initial notification using the selected generative AI model, the formatting script and / or one or more tools to produce the summarized human-readable report for the initial notification.

13. The computer program product of claim 12 wherein the one or more tools includes one or more of: a decoding tool to decode an encoded initial notification; a decompression tool to decompress a compressed initial notification; and an identification tool to identify an owner of a domain associated with the initial notification.

14. The computer program product of claim 11 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: processing the initial notification using a large language model.

15. The computer program product of claim 11 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: utilizing prompt engineering to produce the summarized human- readable report for the initial notification.

16. The computer program product of claim 11 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: utilizing several loops and / or nested loops to produce the summarized human-readable report for the initial notification.Attorney Docket No.122680.200PCT7 17. A computing system including a processor and memory configured to perform operations comprising: maintaining a model repository that defines a plurality of AI models; establishing connectivity with a plurality of security-relevant subsystems within a computing platform; receiving an initial notification of a security event from one of the security-relevant subsystems, wherein the initial notification includes a computer-readable language portion that defines one or more specifics of the security event; and selecting a generative AI model for processing the initial notification of the security event from the plurality of AI models defined within the model repository, thus defining a selected generative AI model.

18. The computing system of claim 17 wherein receiving an initial notification of a security event from one of the security-relevant subsystems includes: receiving the initial notification of the security event from an agent executed on one of the security-relevant subsystems.

19. The computing system of claim 17 further comprising: processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification.

20. The computing system of claim 19 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes:Attorney Docket No.122680.200PCT7 processing the initial notification using the selected generative AI model, the formatting script and / or one or more tools to produce the summarized human-readable report for the initial notification.

21. The computing system of claim 20 wherein the one or more tools includes one or more of: a decoding tool to decode an encoded initial notification; a decompression tool to decompress a compressed initial notification; and an identification tool to identify an owner of a domain associated with the initial notification.

22. The computing system of claim 19 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: processing the initial notification using a large language model.

23. The computing system of claim 19 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: utilizing prompt engineering to produce the summarized human- readable report for the initial notification.

24. The computing system of claim 19 wherein processing the initial notification using the selected generative AI model and a formatting script to produce a summarized human-readable report for the initial notification includes: utilizing several loops and / or nested loops to produce the summarized human-readable report for the initial notification.