IP Library Granted Patent US 11,265,330
Granted Patent B2
US 11,265,330 · App. 16/942,452 · Granted Mar 1, 2022

Systems and methods for improving a security profile of an entity based on peer security profiles

Inventors: Marc Noel Light (Somerville, MA); Liwei Lin (Herndon, VA); Thomas Erhardt Montroy (Cambridge, MA); Miguel Pinto (Dusseldorf, DE)
Assignee: BitSight Technologies, Inc.
H04L63/102H04L41/22H04L63/1408H04L63/1433H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,265,330
App. No.
16/942,452
Granted
Mar 1, 2022
Kind
B2
Abstract

A computer-implemented method is provided for comparing the security profile of a particular entity to peer entities. The method can include receiving, for a particular entity, (i) a value for at least one feature and (ii) a number of security records of one or more security risk types. The method can include determining peer entities based on the value of the features; obtaining, for each peer entity, a number of security records; and adjusting the number of peer security records based on the number of entity security records. The method can further include comparing, for one or more security risk types, the received number of security records for the particular entity to the respective adjusted number of security records for each peer entity; and comparing a security profile of the particular entity to security profiles of the population of peer entities based on the comparison for the security risk types.

Claims (57)

1. A computer-implemented method comprising:

receiving, for a particular entity, (i) a value for at least one feature of the entity and (ii) a number of security records for the entity, each security record being of a security risk type;

determining a population of peer entities based on the value of the at least one feature;

obtaining, for each peer entity, a number of security records;

adjusting the number of peer security records based on the number of entity security records;

comparing, for at least one security risk type, the received number of security records for the particular entity to the respective adjusted number of security records for each peer entity;

presenting the comparison in a user interface;

determining an impact of each security risk type on an entity security profile, wherein the entity security profile is based on two or more security risk types; and

presenting at least one security risk type based on the determined impact.

2. The method of claim 1 , wherein presenting the at least one security risk type based on the determined impact comprises:

determining a rank of each security risk type for improving the entity security profile; and

presenting a ranking of at least two security risk types based on the determined rank of each security risk type.

3. The method of claim 1 , wherein determining the impact of each security risk type on the entity security profile comprises:

determining a temporal decay for the security risk type; and

adjusting the impact of the security risk type based on the temporal decay.

4. The method of claim 1 , wherein determining the population of peer entities based on the value of the at least one feature comprises:

determining the population of peer entities based on a value of a weighted combination of at least two features.

5. The method of claim 1 , wherein the at least one feature comprises:

an industry of an entity;

a security rating of an entity;

a software platform utilized by an entity;

a geographical location of an entity; or

a size of an entity.

6. The method of claim 5 , wherein the industry of an entity comprises at least one of: an industry name or a sector name.

7. The method of claim 5 , wherein the geographical location of an entity is based on at least one of: a physical location or an Internet Protocol (IP) address.

8. The method of claim 5 , wherein the software platform utilized by an entity is for least one of: a server system of the entity, a user base of the entity, or a website of the entity.

9. The method of claim 5 , wherein the size of an entity is based on at least one of: a number of employees of the entity or a number of services provided by the entity.

10. The method of claim 1 , wherein the population of peer entities comprises at least 100 peer entities.

11. A system comprising:

one or more computer systems programmed to perform operations comprising:

receiving, for a particular entity, (i) a value for at least one feature of the entity and (ii) a number of security records for the entity, each security record being of a security risk type;

determining a population of peer entities based on the value of the at least one feature;

obtaining, for each peer entity, a number of security records;

adjusting the number of peer security records based on the number of entity security records;

comparing, for at least one security risk type, the received number of security records for the particular entity to the respective adjusted number of security records for each peer entity;

presenting the comparison in a user interface;

determining an impact of each security risk type on an entity security profile, wherein the entity security profile is based on two or more security risk types; and

presenting at least one security risk type based on the determined impact.

12. The system of claim 11 , wherein presenting the at least one security risk type based on the determined impact comprises:

determining a rank of each security risk type for improving the entity security profile; and

presenting a ranking of at least two security risk types based on the determined rank of each security risk type.

13. The system of claim 11 , wherein determining the impact of each security risk type on the entity security profile comprises:

determining a temporal decay for the security risk type; and

adjusting the impact of the security risk type based on the temporal decay.

14. The system of claim 11 , wherein determining the population of peer entities based on the value of the at least one feature comprises:

determining the population of peer entities based on a value of a weighted combination of at least two features.

15. The system of claim 11 , wherein the at least one feature comprises:

an industry of an entity;

a security rating of an entity;

a software platform utilized by an entity;

a geographical location of an entity; or

a size of an entity.

16. The system of claim 15 , wherein the industry of an entity comprises at least one of: an industry name or a sector name.

17. The system of claim 15 , wherein the geographical location of an entity is based on at least one of: a physical location or an Internet Protocol (IP) address.

18. The system of claim 15 , wherein the software platform utilized by an entity is for least one of: a server system of the entity, a user base of the entity, or a website of the entity.

19. The system of claim 15 , wherein the size of an entity is based on at least one of: a number of employees of the entity or a number of services provided by the entity.

20. The system of claim 11 , wherein the population of peer entities comprises at least 100 peer entities.

Assignments (3)
SECURITY INTEREST Recorded Nov 19, 2020
From: BITSIGHT TECHNOLOGIES, INC.
To: SILICON VALLEY BANK, AS ADMINISTRATIVE AND COLLATERAL AGENT
Reel/Frame 054481/0727 →
SECURITY INTEREST Recorded Nov 19, 2020
From: BITSIGHT TECHNOLOGIES, INC.
To: SILICON VALLEY BANK
Reel/Frame 054481/0739 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 1, 2020
From: LIGHT, MARC NOEL; LIN, LIWEI; MONTROY, THOMAS ERHARDT; PINTO, MIGUEL
To: BITSIGHT TECHNOLOGIES, INC.
Reel/Frame 053652/0920 →
Continuity (2)
Continuation 16802232 · Feb 26, 2020
Related Publication 20210266324A1 · Aug 26, 2021
Cited By (2)
US 1,071,973 US 12,670,458