SYSTEM AND METHOD FOR ADAPTIVE DETECTION ENGINE CONFIGURATION BASED ON ENVIRONMENTAL SECURITY RANKING
卷宗概要
发明人
Filip Olszak; Serg Bell; Stanislav Protasov
IPC 分类
CPC 分类
Systems and methods for adaptive threat detection system configuration based on advanced environmental security ranking. A method includes real-time adjustment of system components, including EDR agents, event scoring units, and event enrichment units, in response to changing threat landscapes and network environments. A method further includes retraining machine learning models, controlling thresholds, and selecting event datasets for training and testing. Additionally, a system configuration manager dynamically adjusts detection engine parameters, including correlation levels, rule-based detector settings, and the depth of analysis.
原文（中文）
Systems and methods for adaptive threat detection system configuration based on advanced environmental security ranking. A method includes real-time adjustment of system components, including EDR agents, event scoring units, and event enrichment units, in response to changing threat landscapes and network environments. A method further includes retraining machine learning models, controlling thresholds, and selecting event datasets for training and testing. Additionally, a system configuration manager dynamically adjusts detection engine parameters, including correlation levels, rule-based detector settings, and the depth of analysis.