SYSTEM FOR MONITORING AND ADDRESSING EVENTS BASED ON TRIPLET METRIC ANALYSIS

• US 20170374092A1
• Filed: 06/23/2016
• Published: 12/28/2017
• Est. Priority Date: 06/23/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Carter, Lonnie Jason
• Granted Patent: US 10,142,363 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud

Abstract

Embodiments of the present invention provide a system for monitoring and addressing events based on triplet metric analysis. In some embodiments, the system transmits control signals to cause a vendor database system to continuously monitor a vendor database for a new data input and, in response to identifying the new data input, automatically transmits the new data input back to the system. From the new data input, the system may identify actors, actor values, means, means values, assets, and asset values associated with certain events. The system may then determine a model based on the new data input and transmit control signals configured to cause a computing device system associated with a user to display a three-dimensional representation of the model.

Claims

1. A system for monitoring and addressing events based on triplet metric analysis, the system comprising:

one or more memory devices; and

one or more processing devices operatively coupled to the one or more memory devices, wherein the one or more processing devices are configured to execute computer-readable program code to;

transmit control signals to cause a vendor database system to continuously monitor a vendor database for a new data input and, in response to identifying the new data input, automatically transmit the new data input to the system, wherein the new data input comprises at least a threat actor, a threat means, and a targeted asset;

receive the new data input from the vendor database system;

identify a threat actor value based on a comparison of the threat actor to an actor value database;

identify a threat means value based on a comparison of the threat means to a means value database;

identify a targeted asset value based on a comparison of the targeted asset to an asset value database;

calculate a threat-based exposure model based at least on the identified threat actor value, the identified threat means value, and the identified targeted asset value; and

in response to calculating the threat-based exposure model, transmit control signals configured to cause a computing device system associated with a user to display a three-dimensional representation of the threat-based exposure model.

2. The system of claim 1, wherein the three-dimensional representation of the threat-based exposure model comprises a two-dimensional display of the threat-based exposure model, wherein a vantage point of the threat-based exposure model is moveable about the two-dimensional display.

3. The system of claim 1, wherein the three-dimensional representation of the threat-based exposure model comprises a virtual reality representation of the threat-based exposure model, and wherein the computing device associated with the user comprises a virtual reality device.

4. The system of claim 1, wherein the one or more processing devices are configured to execute the computer readable program code to:

receive, from the user interface of the computing device associated with the user, instructions to print the threat-based exposure model; and

in response to receiving instructions to print the threat-based exposure model, transmit control signals configured to cause a three-dimensional printer system to print the threat-based exposure model.

5. The system of claim 1, wherein the threat-based exposure model comprises:

R=|avb| sin(θ

) sin(φ

)

wherein;

R is a threat-based exposure value calculated by the threat-based exposure model;

a is the identified threat actor value;

v is the identified threat means value;

b is the identified targeted asset value;

θ

is a degree of relation between the threat actor and the threat means; and

φ

is a degree of relation between the targeted asset and a combination of the identified threat actor and the identified threat means.

6. The system of claim 5, wherein the one or more processing devices are configured to execute the computer readable program code to calculate a total threat-based exposure value as a sum of R and a plurality of different threat-based exposure values associated with different combinations of threat actors, threat means, and targeted assets.

7. The system of claim 6, wherein the one or more processing devices are configured to, in response to calculating the total threat-based exposure value, transmit control signals configured to cause the computing device system associated with the user to display a three-dimensional representation of the total threat-based exposure value.

8. A computer program product for monitoring and addressing events based on triplet metric analysis, the computer program product comprising at least one non-transitory computer readable medium comprising computer readable instructions, the instructions comprising instructions for:

transmitting control signals to cause a vendor database system to continuously monitor a vendor database for a new data input and, in response to identifying the new data input, automatically transmit the new data input to the system, wherein the new data input comprises at least a threat actor, a threat means, and a targeted asset;

receiving the new data input from the vendor database system;

identifying a threat actor value based on a comparison of the threat actor to an actor value database;

identifying a threat means value based on a comparison of the threat means to a means value database;

identifying a targeted asset value based on a comparison of the targeted asset to an asset value database;

calculating a threat-based exposure model based at least on the identified threat actor value, the identified threat means value, and the identified targeted asset value; and

in response to calculating the threat-based exposure model, transmitting control signals configured to cause a computing device system associated with a user to display a three-dimensional representation of the threat-based exposure model.

9. The computer program product of claim 8, wherein the three-dimensional representation of the threat-based exposure model comprises a two-dimensional display of the threat-based exposure model, wherein a vantage point of the threat-based exposure model is moveable about the two-dimensional display.

10. The computer program product of claim 8, wherein the three-dimensional representation of the threat-based exposure model comprises a virtual reality representation of the threat-based exposure model, and wherein the computing device associated with the user comprises a virtual reality device.

11. The computer program product of claim 8, wherein the computer readable instructions further comprise instructions for:

receiving, from the user interface of the computing device associated with the user, instructions to print the threat-based exposure model; and

in response to receiving instructions to print the threat-based exposure model, transmitting control signals configured to cause a three-dimensional printer system to print the threat-based exposure model.

12. The computer program product of claim 8, wherein the threat-based exposure model comprises:

R=|avb| sin(θ

) sin(φ

)

wherein;

R is a threat-based exposure value calculated by the threat-based exposure model;

a is the identified threat actor value;

v is the identified threat means value;

b is the identified targeted asset value;

θ

is a degree of relation between the threat actor and the threat means; and

φ

is a degree of relation between the targeted asset and a combination of the identified threat actor and the identified threat means.

13. The computer program product of claim 12, wherein the computer readable instructions further comprise instructions for calculating a total threat-based exposure value as a sum of R and a plurality of different threat-based exposure values associated with different combinations of threat actors, threat means, and targeted assets.

14. The computer program product of claim 13, wherein the computer readable instructions further comprise instructions, in response to calculating the total threat-based exposure value, transmitting control signals configured to cause the computing device system associated with the user to display a three-dimensional representation of the total threat-based exposure value.

15. A computer implemented method for monitoring and addressing events based on triplet metric analysis, said computer implemented method comprising:

transmitting control signals to cause a vendor database system to continuously monitor a vendor database for a new data input and, in response to identifying the new data input, automatically transmit the new data input to the system, wherein the new data input comprises at least a threat actor, a threat means, and a targeted asset;

receiving the new data input from the vendor database system;

identifying a threat actor value based on a comparison of the threat actor to an actor value database;

identifying a threat means value based on a comparison of the threat means to a means value database;

identifying a targeted asset value based on a comparison of the targeted asset to an asset value database;

calculating a threat-based exposure model based at least on the identified threat actor value, the identified threat means value, and the identified targeted asset value; and

in response to calculating the threat-based exposure model, transmitting control signals configured to cause a computing device system associated with a user to display a three-dimensional representation of the threat-based exposure model.

16. The computer implemented method of claim 15, wherein the three-dimensional representation of the threat-based exposure model comprises a two-dimensional display of the threat-based exposure model, wherein a vantage point of the threat-based exposure model is moveable about the two-dimensional display.

17. The computer implemented method of claim 15, wherein the three-dimensional representation of the threat-based exposure model comprises a virtual reality representation of the threat-based exposure model, and wherein the computing device associated with the user comprises a virtual reality device.

18. The computer implemented method of claim 15, wherein the threat-based exposure model comprises:

R=|avb| sin(θ

) sin(φ

)

wherein;

R is a threat-based exposure value calculated by the threat-based exposure model;

a is the identified threat actor value;

v is the identified threat means value;

b is the identified targeted asset value;

θ

is a degree of relation between the threat actor and the threat means; and

φ

is a degree of relation between the targeted asset and a combination of the identified threat actor and the identified threat means.

19. The computer implemented method of claim 18, wherein the computer implemented method further comprises calculating a total threat-based exposure value as a sum of R and a plurality of different threat-based exposure values associated with different combinations of threat actors, threat means, and targeted assets.

20. The computer implemented method of claim 20, wherein the computer implemented method further comprises instructions, in response to calculating the total threat-based exposure value, transmitting control signals configured to cause the computing device system associated with the user to display a three-dimensional representation of the total threat-based exposure value.