SCORING FOR THREAT OBSERVABLES

摘要

Example embodiments disclosed herein relate to determining threat scores for threat observables. Information about multiple threat observables are received from providing entities. The information about the threat observables include at least one attribute about a respective threat associated with the threat observable. Threat scores are determined for the respective threat observables for multiple entities. In one example, a first score of a first one of the threat observables is determined and is different than a second score of the first threat observable for a second entity based on a treatment of the attribute(s).

主权项

1. A non-transitory machine-readable storage medium storing instructions that, if executed by at least one processor of a device, cause the device to:
receive information about a plurality of threat observables from a plurality of providing entities, wherein the threat observables respectively include at least one attribute about a respective threat associated with the respective threat observable; and determine threat scores for the respective threat observables for a plurality of entities, wherein a first score of a first one of the threat observables for a first entity is different than a second score of the first one threat observable for a second entity based on a treatment of the at least one attribute.