Bank of America Corporation

David Michael Steele

Jason Dean Vaughn

Nelson John Chevis, Sr

Allan Carlton Byers

Robert James Gray

Ryan Joseph Argomaniz

Cory David Brunner

Sean Denton

Mathew Allen Woodyard

Edward Gansevoort Sofio

Margaret R Skiljan

Rhonda L Kunsch

Embodiments of the invention are directed to systems, methods, and computer program products for real-time generation and deployment of specific user information security vulnerability levels based on vulnerability assessments for the user. The invention utilizes a two-component system to detect security vulnerabilities for a user, generate a coherent vulnerability level for the user in real-time, and provides user specific mitigation actions depending on each user vulnerability assessment. The first component of the system is an information threat assessment engine, which identifies and/or receives external and internal data regarding users to determine information security threats. The second component is an analytics engine, which is configured to generate vulnerability levels and specific mitigation actions for the user based on threat patterning.

Information security vulnerability assessment system

A system for generating entity-specific security-related inquiries and determining a frequency for invoking the inquiries based on integration of external security-related data and internal security related data. Specifically, a security threat level is determined for an entity and the components which comprise the security threat are identified. The components signify areas of focus for generating the entity-specific security-related inquiries. In further embodiments of the invention analytics are implemented to logically analyze the external security-related data and internal security related data and the results of which further refine the generation of the entity-specific security-related inquiries and/or determination of the frequency for invoking the inquiries.

System for information security threat assessment and event triggering

The invention utilizes a two-component system to detect third party security threats and drive improved security threat mitigation based on the detection. The first component of the system is a security threat assessment engine, which receives and/or identifies external data and internal data regarding third parties in order to determine information security threats posed by third parties. The second component of the system is an analytics engine, which may comprise a machine learning component which is configured to detect threat patterns and anomalies. In response to the detection of the threat patterns and anomalies the security threat assessment engine may be modified in order to more accurately determine security threats.

System for information security threat assessment based on data history

The invention utilizes a two-component system to detect third party security threats and drive improved security threat mitigation based on the detection. The first component of the system is a security threat assessment engine, which receives and/or identifies external data and internal data regarding third parties in order to determine information security threats posed by third-parties. The second component of the system is an analytics engine, which may comprise a machine learning component which is configured to detect threat patterns and anomalies. In response to the detection of the threat patterns and anomalies the security threat assessment engine may be modified in order to more accurately determine security threats. The system after identifying a security threat, generates a notification associated with the security threat and transfers the notification to a first set of third parties that may be affected by the security threat.

System for generating a communication pathway for third party vulnerability management

Embodiments of the present invention are directed to data integration and threat assessment for triggering analysis of connection oscillations in order to improve data and connection security. The invention leverages a security threat assessment engine and an analytics engine to gather and process data from a combination of internal and external data sources for a third party connection. The system continuously monitors and updates a generated threat level for a third party connection to determine changes or triggers indicating a potential security threat. In response to these determined changes or triggers, the system then responds to a detected security threat and minimizes damages resulting from data compromised by third party systems. Further, the system may extract and recover data from the third party systems and alter connection channels in order to further limit losses.

Data integration system for triggering analysis of connection oscillations

System for recurring information security threat assessment

The invention utilizes a two-component system to detect third party security threats and drive internal system processes based on the detection. The first component of the system is a threat level engine, which collects external and internal system data on a real-time basis to determine changes in conditions that may give rise to a security threat. Based on the external and internal data, the level engine may calculate a threat assessment level to determine the level of the threat. The second component of the system is a third party analytics engine, which may comprise a machine learning component which is configured to detect threat patterns and anomalies, which may in turn be used to trigger events or to drive internal system processes.

System for information security threat assessment

A system includes an aggregation engine that initiates a first interface module in response to a first request from a first user that indicates a first type of project information. The aggregation engine also receives, via the first interface module, the first type of project information and stores the first type of project information in a memory. The system additionally includes a workflow engine that initiates one or more workflows that indicate certain project information requested by an external group. The workflow engine retrieves, from the memory and based upon the initiated one or more workflows, a first subset of the first type of project information and formats the first subset of project information according to the workflow. The system also includes an export engine that transmits the formatted first subset of project information to the external group according to the initiated one or more workflows.

Growing community of inventors

Carrollton, TX, United States of America

David Michael Steele