SYSTEM AND METHOD FOR A CYBER INTELLIGENCE HUB

• US 20160119365A1
• Filed: 10/28/2014
• Published: 04/28/2016
• Est. Priority Date: 10/28/2014
• Status: Abandoned Application

• Current Assignee: Comsec Consulting Ltd. (HUB Security Ltd.)
• Original Assignee: Comsec Consulting Ltd. (HUB Security Ltd.)
• Inventors: Barel, Nissim
• Application Number:
  US14/526,214
• Publication Number:
  US 20160119365A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 16/35 Clustering; Classification
• CPC Class Codes: G06F 16/84 Mapping; Conversion
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A method for defining and forming a cyber intelligence channel communicating with consumers is facing cyber threats in real time. The method includes collecting information, such that web crawlers and scrapers. The method also includes filtering the collected information, by filtering mechanisms founded on advanced algorithms. The method goes on to categorize the information into groups based on their unique characteristics, collecting capabilities and input and output constraints. The method further includes mapping the information and putting it into context and targeting and pinpointing the information, such that the data collected in the data intelligence collection unit is gathered through innovative technologies that enable automated and massive, yet targeted collection of the data that exists in the cyber space.

Claims

1. A method for defining and forming a cyber intelligence channel/hub (CIH) communicating with consumers, wherein the CIH faces cyber threats in real time, the method comprising:

Collecting and delivering information, such that web crawlers and scrapers, which characterize the operation of an information collection unit, are designed to ensure that the collection processes are optimized to detect the type of gathered data, its relevancy and origin;

filtering the collected information, by filtering mechanisms founded on advanced algorithms, which consider all the relevant information at real time and enable handling this information in an educated manner;

categorizing the information into groups based on their unique characteristics, collecting capabilities and input and output constraints;

mapping the information and putting it into context, such that a visual presentation of a connection map assists in determining the threats each consumer faces in real time, regardless of the origin of the information, its time stamp or source; and

targeting and pinpointing the information, such that the data collected in the data intelligence collection unit is gathered through innovative technologies that enable automated and massive, yet targeted collection of the data that exists in the cyber space,

such that the CIH enables users to detect cyber related threats prior to their occurrence and to by proactively tackle the source of the threats rather than only responding to them.

2. The method of claim 1, wherein the CIH IS integrated into a single comprehensive hub which is capable of providing end to end cyber intelligence services to multiple users simultaneously.

3. The method of claim 1, wherein filtering is by date.

4. The method of claim 1, wherein filtering is by type of data.

5. The method of claim 1, wherein filtering is by date and type of data.

6. The method of claim 1, further comprising correlating the collected information, based on mechanisms which have the capability of attributing different pieces of information into a single report based on various characteristics

7. The method of claim 6, wherein the characteristics comprise key words.

8. The method of claim 6, wherein the characteristics comprise geo-location.

9. The method of claim 6, wherein the characteristics comprise content-less information.

10. The method of claim 1, wherein the CIH is preconfigured for the collection and delivery of data leakage monitoring and cyber security “

early warnings”

information.

11. The method of claim 1, wherein the Early Warning”

service provides organizations with information regarding potential cyber-attacks as well as leakage of sensitive information to the cyber space.

12. The method of claim 1, wherein the CIH is capable of detecting the finger print of various data types.

13. The method of claim 1, wherein the collection capabilities focus at least on:

search of confidential corporate financial data;

sensitive company records;

documents, batches of emails, sensitive and proprietary source code, credit card numbers;

corporate intellectual property (IP);

confidential employee data;

confidential customer data; and

false advertising;

announcements that can affect company stock value and overall business.

14. The method of claim 1, wherein the CIH is preconfigured for the collection and delivery of Open Source Intelligence (OSINT), Security and Cyber Threat Related Feeds.

16. The method of claim 1, wherein the CIH is preconfigured for the collection and delivery of Social Network Footprint and Trend and Sentiment Analysis by correlating the cross channels, with the advanced analysis capabilities of the systems, and wherein the CIH is capable of displaying, in real time and at any given moment, the cyber image of the organization.

15. The method of claim 144, wherein the information gathered by the CIH is formatted into a uniform template which is then fed into the advanced analysis engines of the hub for further analysis and information correlation.