International Business Machines Corporation

Omar Hammami

ChunHui Yang Higgins

Shirley M Han

Ryan West

Oner Sufri

Kevin Potter

Emilio Fiallos

Gustavo Adolfo Arismendi Camero

William Wesley Beaver

Kyle Greeley

Zachary Ryan

A computer-implemented method, computer system, and computer program product for threat management. A set of features used by a machine learning model is collected by the computer system to determine a threat type for an access attempt when the access attempt is detected. A cluster is determined, by the machine learning model in the computer system, for the access attempt using the set of features, wherein the machine learning model implements clustering to determine the cluster for the access attempt, and wherein the cluster for the access attempt corresponds to the threat type for the access attempt. A set of actions is performed by the machine learning model in the computer system based on the threat type determined for the access attempt.

Intrusion management with threat type clustering

Growing community of inventors

Blaine, MN, United States of America

Omar Hammami