Hewlett Packard Enterprise Development LP

Entit Software LLC

Suranjan Pramanik

Tomas Sander

Anurag Singla

Robert Block

William G Horne

Daniel Juergen Gmach

Alvin AuYoung

Sandeep N Bhatt

Siva Raj Rajagopalan

Daniel L Moor

Jayaram Kallapalayam Radhakrishnan

Julian James Stephen

In response to determining that an event matches a condition of a rule, a given one of a plurality of computing nodes is selected to send the event, based on one or both of an attribute of the event and an identifier of the rule. Information of the event is sent to the given computing node to perform correlation of the event with another event.

Selecting from computing nodes for correlating events

According to an example, a confidence factor function may be applied to determine a confidence factor for a condition of a rule to correlate events. The confidence factor may be an approximation of whether an event or a set of events satisfies the condition in the rule. The confidence factor may be compared to a threshold to determine whether the condition is satisfied.

Event correlation based on confidence factor

An example of security threat analysis can include generating a security threat hypothesis based on security data in a threat exchange server. A request for analysis based on the security data can be sent via communication links to at least one security monitored participant to analyze the security data. A response can be received from the at least one security monitored participant with information related to the completed security related task.

Security threat analysis

Identifying participants for collaboration in a threat exchange community can include receiving security data from a plurality of participants at a threat exchange server within the threat exchange community; and in response to receiving from a first participant from the plurality of participants security data associated with a security occurrence, identifying at the threat exchange server the first participant and a second participant from the plurality of participants for collaboration based on characteristics of the first participant and the second participant.

Identifying participants for collaboration in a threat exchange community

Growing community of inventors

Sunnyvale, CA, United States of America

Suranjan Pramanik