System and Method for Threat Assessment
A system and method for threat assessment are provided. The system includes a computer system; a data access subsystem programmed into and executed by the computer system for receiving data from a data source, and parsing the data to identify one or more messages; an analytics subsystem programmed into and executed by the computer system for processing and scoring the one or more messages to calculate one or more threat scores; and a communications subsystem programmed into and executed by the computer system for transmitting the one or more messages to a user.
1 . A threat assessment system, comprising:
a computer system;
a data access subsystem programmed into and executed by the computer system for receiving data from a data source in communication with the computer system, and parsing the data to identify a message;
an analytics subsystem programmed into and executed by the computer system for processing and scoring the message to calculate one or more threat scores using one or more threat engines; and
a communications subsystem programmed into and executed by the computer system for determining whether to transmit the message and associated indication of threat level to a user based upon the one or more threat scores.
2 . The threat assessment system of claim 1 , wherein the message is of at least two languages.
3 . The threat assessment system of claim 1 , wherein the analytics subsystem determines hits based on one or more thresholds.
4 . The threat assessment system of claim 3 , wherein hits are determined from a multiscore metric dependent on one or more threshold combinations.
5 . The threat assessment system of claim 1 , further comprising an adaptive subsystem programmed into and executed by the computer system for allowing a user to provide feedback relating to the message.
6 . The threat assessment system of claim 5 , wherein the analytics subsystem includes a termlist comprising one or more terms and associated weights, and the adaptive subsystem adjusts the weights in the termlist based on user feedback.
7 . The threat assessment system of claim 6 , wherein the adaptive subsystem adds or deletes terms in the termlist based on user feedback.
8 . The threat assessment system of claim 6 , wherein the adaptive subsystem identifies terms that are not in the termlist.
9 . The threat assessment system of claim 1 , wherein the threat engine processes at least two messages in parallel.
10 . The threat assessment system of claim 9 , wherein the threat engine processes the at least two messages in parallel with at least one other threat engine.
11 . The threat assessment system of claim 1 , wherein the analytics subsystem scores the message using statistical language processing.
12 . The threat assessment system of claim 1 , wherein the analytics subsystem scores the message using natural language processing.
13 . A method for threat assessment, comprising the steps of:
receiving data from a data source in communication with a computer system;
parsing the data to identify a message using a data access subsystem programmed into and executed by the computer system;
processing and scoring the message using an analytics subsystem programmed into and executed by the computer system to calculate one or more threat scores using one or more threat engines; and
determining whether to transmit the message to a user based upon the one or more threat scores using a communications subsystem programmed into and executed by the computer system.
14 . The method for threat assessment of claim 13 , wherein the message is of at least two languages.
15 . The method for threat assessment of claim 13 , further comprising determining hits based on one or more thresholds using the analytics subsystem.
16 . The method for threat assessment of claim 15 , wherein hits are determined from a multiscore metric dependent on one or more threshold combinations using the analytics subsystem.
17 . The method for threat assessment of claim 13 , further comprising allowing a user to provide feedback relating to the message using an adaptive subsystem programmed into and executed by the computer system.
18 . The method for threat assessment of claim 17 , wherein the analytics subsystem includes a termlist comprising one or more terms and associated weights, and further comprising adjusting the weights in the termlist based on user feedback.
19 . The method for threat assessment of claim 18 , further comprising adding or deleting terms in the termlist based on user feedback using the adaptive subsystem
20 . The method for threat assessment of claim 18 , further comprising identifying terms that are not in the termlist using the adaptive subsystem.
21 . The method for threat assessment of claim 13 , further comprising processing at least two messages in parallel using the threat engine of the analytics subsystem.
22 . The method for threat assessment of claim 21 , further comprising processing the at least two messages using the threat engine in parallel with at least one other threat engine.
23 . The method for threat assessment of claim 13 , wherein processing and scoring the message comprises statistical language processing.
24 . The method for threat assessment of claim 13 , wherein processing and scoring the message comprises natural language processing.
25 . A computer-readable medium having computer-readable instructions stored thereon which, when executed by a computer system, cause the computer system to perform the steps of:
receiving data from a data source in communication with a computer system;
parsing the data to identify a message using a data access subsystem programmed into and executed by the computer system;
processing and scoring the message using an analytics subsystem programmed into and executed by the computer system to calculate one or more threat scores using one or more threat engines; and
determining whether to transmit the message to a user based upon the one or more threat scores using a communications subsystem programmed into and executed by the computer system.
26 . The computer-readable medium of claim 25 , wherein the message is of at least two languages.
27 . The computer-readable medium of claim 25 , further comprising determining hits based on one or more thresholds using the analytics subsystem.
28 . The computer-readable medium of claim 37 , wherein hits are determined from a multiscore metric dependent on one or more threshold combinations using the analytics subsystem.
29 . The computer-readable medium of claim 25 , further comprising allowing a user to provide feedback relating to the message using an adaptive subsystem programmed into and executed by the computer system.
30 . The computer-readable medium of claim 29 , wherein the analytics subsystem includes a termlist comprising one or more terms and associated weights, and further comprising adjusting the weights in the termlist based on user feedback.
31 . The computer-readable medium of claim 30 , further comprising adding or deleting terms in the termlist based on user feedback using the adaptive subsystem
32 . The computer-readable medium of claim 30 , further comprising identifying terms that are not in the termlist using the adaptive subsystem.
33 . The computer-readable medium of claim 25 , further comprising processing at least two messages in parallel using the threat engine of the analytics subsystem.
34 . The computer-readable medium of claim 33 , further comprising processing the at least two messages using the threat engine in parallel with at least one other threat engine.
35 . The computer-readable medium of claim 25 , wherein processing and scoring the message comprises statistical language processing.
36 . The method for threat assessment of claim 25 , wherein processing and scoring the message comprises natural language processing.