Cyber Threat Defense Platform Normalizing Disparate Security Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Disparate security data sources generate data in varying formats, making coordinated cyber threat defense strategies impractical due to incompatibility and lack of standardization.
Innovation Solution
An integrated cyber threat defense exchange platform normalizes security data from multiple sources using a unified schema, enabling coordinated security actions across networked computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If disparate security data sources are used to protect different networked computing devices, then security coverage is improved, but data compatibility and coordination become impractical
Solution Approach 1:
The patent introduces a centralized security data platform that acts as an intermediary between disparate security data sources and security response systems. This platform receives security data from multiple sources in different formats, normalizes it into a unified format, and distributes it to coordinating systems. The intermediary resolves the contradiction by enabling broad security coverage through multiple sources while maintaining data coordination through centralized standardization, thus preventing the exponential complexity that would arise from direct peer-to-peer coordination.
2Measurement precision
If security data is collected from multiple sources in different formats, then detection capability is improved, but data standardization becomes impractical
Solution Approach 1:
The patent applies parameter changes by transforming security data from various formats into a unified standardized format through a data normalization process. The system maintains the ability to collect diverse data from multiple sources while changing the format parameters to a common structure. This enables accurate threat detection by preserving the informational content from different sources while making the data compatible for coordinated analysis and response across the network.
3Productivity
If a unified security data platform is implemented, then coordinated response is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal security data platform that performs multiple functions: collecting data from various sources, normalizing data formats, storing standardized data, and distributing it to response systems. By consolidating these functions into a single multi-functional platform, the system achieves efficient coordinated response without the complexity of multiple separate systems. The universal platform reduces overall system complexity compared to having separate collection, normalization, storage, and distribution systems.
Data Source
AI summary
The disclosed computer-implemented method for providing an integrated cyber threat defense exchange platform may include (i) receiving unnormalized security data from a plurality of disparate security data sources that generate security data in differing formats, (ii) normalizing, using a security data schema, the unnormalized security data into normalized security data, (iii) identifying a security action that is responsive to at least one security event identified within the normalized security data, and (iv) coordinating performance of the security action within a plurality of networked computing devices. Various other methods, systems, and computer-readable media are also disclosed.