The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
May. 05, 2026
Filed:
Oct. 14, 2024
International Business Machines Corporation, Armonk, NY (US);
Joshua J. Powers, Round Hill, VA (US);
Christopher A. Kulakowski, Austin, TX (US);
Sophia Izokun, New York, NY (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
Reducing false positive computer security alerts is provided. A dataset is ingested that comprises a number of security alerts with resolution status. The alerts comprise data fields which are then tokenized. Cardinality is calculated for each tokenized data field compared against the whole dataset. Entropy is calculated for each tokenized value. A combined token score is generated for each tokenized field based on cardinality and entropy. Each combined token score is compared against all tokenized fields for the alerts. Each combined token score is adjusted based on the comparison. Any tokens resolved as true positives are excluded. A generative language model generates an exclusion condition based on the adjusted token scores. The exclusion condition is run against a second dataset to generate a score. The exclusion condition and its score are presented to a user. Responsive to user acceptance, the exclusion condition is deployed to filter false positive alerts.