INCORPORATING SOFTWARE-AS-A-SERVICE DATA INTO A CYBER THREAT DEFENSE SYSTEM

Abstract: a cyber threat defense system can incorporate data from a software-as-a-service (saas) application hosted by a third-party operator platform to identify cyber threats related to that saas application. the cyber threat defense module can have a saas module to collect third-party event data from the third-party operator platform. the cyber threat defense system can have a comparison module to compare third-party event data for a network entity to at least one machine-learning model of a network entity using a normal behavior benchmark to spot behavior deviating from normal benign behavior. the comparison module can identify whether the network entity is in a breach state. the cyber threat defense system can have a cyber threat module to identify whether the breach state and a chain of relevant behavioral parameters correspond to a cyber threat. an autonomous response module can execute an autonomous response in response to the cyber threat.

Inventor(s): Jacob Araiza, Andrew Woodford, David Palmer

CPC Classification: H04L63/1441 ({Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms )})

Search for rejections for patent application number 20250175493