SYSTEM AND METHOD FOR ADAPTIVE DETECTION ENGINE CONFIGURATION BASED ON ENVIRONMENTAL SECURITY RANKING
개요
발명자
Filip Olszak; Serg Bell; Stanislav Protasov
IPC 분류
CPC 분류
Systems and methods for adaptive threat detection system configuration based on advanced environmental security ranking. A method includes real-time adjustment of system components, including EDR agents, event scoring units, and event enrichment units, in response to changing threat landscapes and network environments. A method further includes retraining machine learning models, controlling thresholds, and selecting event datasets for training and testing. Additionally, a system configuration manager dynamically adjusts detection engine parameters, including correlation levels, rule-based detector settings, and the depth of analysis.
원문 (중국어)
Systems and methods for adaptive threat detection system configuration based on advanced environmental security ranking. A method includes real-time adjustment of system components, including EDR agents, event scoring units, and event enrichment units, in response to changing threat landscapes and network environments. A method further includes retraining machine learning models, controlling thresholds, and selecting event datasets for training and testing. Additionally, a system configuration manager dynamically adjusts detection engine parameters, including correlation levels, rule-based detector settings, and the depth of analysis.