Security Information Management via Relevance Prioritization

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current security information management systems struggle to efficiently collect and provide highly relevant security information beyond vulnerability data, as system administrators face challenges in selecting appropriate keywords and distinguishing relevant information from search results, leading to labor-intensive processes.

Innovation Solution

A security information management system and method that utilize a collecting unit, a calculating unit, and an output unit to extract keywords from referrer security information using a security dictionary, calculate relevance, and prioritize output of highly relevant security information, incorporating a security dictionary for each attribute to enhance relevance determination.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If security information is collected using search engines with keywords from referrer security information, then security information can be collected, but the collected information includes much low-relevance security information and general information, requiring much labor to distinguish highly relevant information

Engineering Contradiction:

Improvequantity of collected security informationVSAvoidease of distinguishing relevant information

Core Design Contradiction:

Quantity of substanceVSEase of operation

Solution Approach 1:

The patent introduces a security information management server as an intermediary between the search engine and the system administrator. This server automatically determines relevance between collected security information and referrer security information using predetermined criteria, thereby filtering out low-relevance information before it reaches the administrator and reducing the manual labor required for distinction.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements a feedback mechanism where the security information management server continuously evaluates collected security information against referrer security information, automatically identifying and prioritizing highly relevant information based on predetermined determination criteria, thus improving the quality of collected information without increasing manual effort.

Inventive Principle:

Principle #23Feedback

2Measurement precision

If collection is performed by using a search engine through use of a keyword included in the referrer security information as a clue, then security information can be collected, but unless a system administrator has knowledge related to security, an appropriate keyword is unable to be selected and highly relevant security information is unable to be collected

Engineering Contradiction:

Improveprecision of keyword selectionVSAvoidease of keyword selection

Core Design Contradiction:

Measurement precisionVSEase of operation

Solution Approach 1:

The system enables self-service by automatically extracting keywords from the referrer security information and using them to perform collections without requiring the system administrator to manually select appropriate security-related keywords. The predetermined determination criteria automatically identify relevant information based on the extracted keywords, making the process accessible even to administrators without specialized security knowledge.

Inventive Principle:

Principle #25Self-service

3Measurement precision

If relevance determination is performed manually by system administrators, then highly relevant security information can be identified, but much labor is required in distinguishing highly relevant security information from search results

Engineering Contradiction:

Improveprecision of relevance determinationVSAvoidtime required for relevance determination

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The patent replaces the manual mechanical process of relevance determination with an automated information processing system. The security information management server automatically determines relevance between collected security information and referrer security information using predetermined criteria, thereby eliminating the need for manual distinction while maintaining high precision in identifying relevant information.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10789366B2Security information management system and security information management method

Publication Date: 2020.09.29 NIPPON TELEGRAPH & TELEPHONE CORP

AI summary

In a security information management device (10), security information, which is information related to security, is collected. The security information management device (10) extracts, by referring to a security dictionary storing therein a keyword related to security for each attribute, a keyword from referrer security information that becomes a source to be compared with security information for relevance thereto, and calculates, by comparing the extracted keyword with a keyword included in the collected security information, relevance between the referrer security information and the security information. The security information management device (10) then output security information having higher calculated relevance more preferentially.