METHOD AND SYSTEM FOR CONTROLLING CONTEXT-AWARE CYBERSECURITY TRAINING

摘要

A context-aware training system senses a user action that may expose the user to a threat, such as a cybersecurity threat. The system selects a training action from a collection of available training actions and causes the training action to be delivered to the user or a group of users. The system includes an administrator interface that enables an administrator to select, customize and/or assign constraints to the training action that will be delivered to the user(s).

主权项

1. A cybersecurity training system, comprising:
a processor; one or more data storage devices that store:
at least one training intervention, anda training needs model; a computer-readable memory portion holding programming instructions that, when executed, instruct one or more processors to implement a policy manager that:
analyzes data relating to at least one user by applying the training needs model to the data to determine whether the at least one user may be at risk for a threat scenario, andidentifies, from the at least one training intervention, a set of one or more system-selected training interventions that are relevant to the threat scenario; a computer-readable memory portion holding programming instructions that, when executed, instruct one or more processors to implement a system administrator interface that displays the set of one or more system-selected training interventions and receives a selection of an intervention in the set from an administrator; and a computer-readable memory portion holding programming instructions that, when executed, instruct one or more processors to generate a command to deliver the administrator-selected training intervention to the at least one user.