Steven C Mckay

US Patent:

20200186569, Jun 11, 2020

Filed:

Dec 5, 2018

Appl. No.:

16/210063

Inventors:

- Armonk NY, US
Michael Spisak - East Northport NY, US
Carlos Alberto Lopez Chinchilla - Santa Ana, CR
Steven D. McKay - Kechi KS, US
Eric Hanratty - Freeport FL, US

International Classification:

H04L 29/06

Abstract:

Security rules management mechanisms are provided. A cognitive computing system of the security rules management system ingests natural language content, from one or more corpora, describing features of security attacks, and ingests security event log data from a monitored computing environment. The cognitive computing system processes the natural language content from the one or more corpora and the security event log data to identify attack characteristics applicable to the security event log data. A security rule query engine evaluates existing security rules present in a security rules database to determine if any existing security rule addresses the attack characteristics. In response to the evaluation indicating that no existing security rule addresses the attack characteristics, a security rule generator automatically generates a new security rule based on the attack characteristics, which is then deployed to the monitored computing environment.