Generative AI Threat Mitigation Planning Across Security Subsystems

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Threat mitigation systems face complexity in addressing computer attacks due to the need for unique queries for each security-relevant subsystem, making it inefficient and cumbersome to gather and process security event information.

Innovation Solution

A threat mitigation platform utilizing a generative AI-based planner subsystem to generate mitigation plans, an executor subsystem to process the plan iteratively, and an output formatter subsystem to produce a summarized human-readable report, enabling efficient and standardized information processing across multiple security-relevant subsystems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If unique queries are formulated for each security-relevant subsystem, then information can be gathered from each subsystem, but the process becomes complex and inefficient

Engineering Contradiction:
Improveinformation gathering completenessVSAvoidquery formulation complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent applies universality by creating a single standardized query template that can be used across multiple security-relevant subsystems. This universal query structure eliminates the need to formulate unique queries for each subsystem while maintaining the ability to gather comprehensive information from all subsystems, thereby reducing complexity without sacrificing information completeness.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Loss of information

If multiple security-relevant subsystems are queried individually, then comprehensive security information can be obtained, but processing time and efficiency decrease

Engineering Contradiction:
Improvesecurity event information completenessVSAvoidinformation processing time
Core Design Contradiction:
Loss of informationVSLoss of time

Solution Approach 1:

The patent merges the query process by consolidating multiple individual queries into a single standardized query template. This unified approach allows the system to gather security information from multiple subsystems simultaneously rather than sequentially, significantly reducing processing time while maintaining comprehensive information collection.

Inventive Principle:
Principle #5Merging (Combining)

3Productivity

If standardized queries are used across subsystems, then processing efficiency improves, but the ability to handle subsystem-specific nuances may be reduced

Engineering Contradiction:
Improveinformation processing efficiencyVSAvoidsubsystem-specific query adaptation
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent applies local quality by allowing the standardized query template to be dynamically adjusted with subsystem-specific parameters and configurations. This enables the query to maintain a standardized structure for efficiency while incorporating local adaptations to handle subsystem-specific nuances and requirements, achieving both productivity and adaptability.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS12407716B2Threat mitigation system and method
Publication Date: 2025.09.02 RELIAQUEST HOLDINGS LLC
  • US12407716B2 patent drawing
  • US12407716B2 patent drawing
  • US12407716B2 patent drawing

AI summary

A threat mitigation platform includes: an agent subsystem configured to generate an initial notification concerning a security event within a computing platform; a generative AI-based planner subsystem configured to receive the initial notification and generate a mitigation plan to address, in whole or in part, the security event within the computing platform; an executor subsystem configured to iteratively process the mitigation plan using a generative AI model to generate an output; and an output formatter subsystem configured to format the output and generate a summarized human-readable report for the initial notification.