AI Threat Mitigation Reporting for Multi-Subsystem Security Events
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Threat mitigation systems face complexity in handling diverse security-relevant subsystems, requiring unique queries for each, which is inefficient and cumbersome.
Innovation Solution
A computer-implemented method using a Generative AI Model to process and summarize security event notifications, generating human-readable reports, with feedback loops to refine the process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If unique queries are formulated for each security-relevant subsystem, then information can be obtained from each subsystem, but the process becomes inefficient and cumbersome
Solution Approach 1:
The patent applies universality by creating a single standardized query template that can be used across multiple security-relevant subsystems. Instead of formulating unique queries for each subsystem, the system uses one universal query structure that adapts to different subsystems through parameter substitution, thereby maintaining complete information gathering while dramatically improving query formulation efficiency
Solution Approach 2:
The patent introduces an intermediary layer between the user and the security subsystems. This intermediary is the standardized query template framework, which mediates the interaction by providing a uniform interface that translates user requests into subsystem-specific queries automatically, eliminating the need for users to craft custom queries for each subsystem
2Reliability
If multiple security-relevant subsystems are used, then comprehensive security monitoring is achieved, but system complexity increases
Solution Approach 1:
The standardized query template framework provides multi-functionality by enabling a single query structure to interact with multiple different security subsystems. This universal template approach maintains comprehensive security monitoring coverage across all subsystems while reducing query management complexity through standardization
Solution Approach 2:
The patent segments the query management function from the security subsystems themselves. By separating the query formulation logic into a reusable template framework, the system manages complexity at the framework level rather than within each subsystem interaction, allowing comprehensive monitoring without proportional increases in query management complexity
Data Source
AI summary
A computer-implemented method, computer program product and computing system for defining a formatting script for use with a Generative AI Model; receiving a plurality of notifications of a security event, wherein each of the plurality of notifications includes a computer-readable language portion that defines one or more specifics of the security event, thus defining a plurality of computer-readable language portions; processing at least a portion of each of the plurality of computer-readable language portions using the Generative AI Model and the formatting script to summarize each of the computer-readable language portions and generate a plurality of event summaries; and′ processing at least a portion of each of the plurality of event summaries using the Generative AI Model and the formatting script to summarize the plurality of event summaries and generate a summarized human-readable report.