Symantec Corporation

Shang-Chieh Wu

Rehan Jalil

Shoukat Ali

Ranjani Gunupudi

According to one embodiment, a computer-implemented method performed by a computing device comprising at least one processor, the method comprising determining a threat score for a user action in a computer application and calculating a decayed threat score based on the determined threat score and a damping factor. The threat score being indicative of a risk presented by the user action, the decayed threat score being a modified threat score for the user action, and the damping factor being a constant value used to reduce the determined threat score.

System and method for determining a decayed threat score

According to one embodiment, a computer-implemented method comprises determining a first threat score and a second threat score respectively corresponding to a first user action and a second user action on one or more computer applications and calculating an aggregate threat score for the determined threat scores. Calculating the aggregate threat score comprises summing together the first threat score and a contribution of the second threat score, wherein the contribution of the second threat score is determined based on the second threat score and a margin corresponding to the difference between a maximum threat score and the first threat score.

Growing community of inventors

San Jose, CA, United States of America

Shang-Chieh Wu