International Business Machines Corporation

Anton Puzanov

Eitan Menahem

Aviv Ron

Andrey Finkelshtein

Noga Agmon

Bar Haim

Eitan Chertok

Romy Varga

Described are techniques for automated labeling of cybersecurity incidents. The techniques include generating a set of labels for a received cybersecurity incident based on features of the received cybersecurity incident. The techniques further include prioritizing the set of labels to generate a subset of labels, and associating the subset of labels to the received cybersecurity incident.

Label recommendation for cybersecurity content

An example system includes a processor to receive mouse event data of a session. The processor is to split the mouse event data of the session into mouse event n-grams. The processor is to extract features from the mouse event n-grams. The processor is to send the extracted features to a trained machine learning model. The processor is to receive an output decision from the trained machine learning model.

Machine learning model trained using features extracted from n-grams of mouse event data

Growing community of inventors

Mitzpe Ramon, Israel

Anton Puzanov