IP Library › Granted Patent US 12,212,596
Granted Patent B2
US 12,212,596 · App. 18/121,753 · Granted Jan 28, 2025

Systems and methods for an artificial intelligence driven smart template

Inventor: Stu Sjouwerman (Bellair, FL)
Assignee: KnowBe4, Inc.
H04L63/1433G06F16/951G06F21/56G06F30/20G06N5/02G06N20/00H04L51/212H04L63/1466H04L63/1483H04W12/122G06F2221/034H04L51/23H04W12/128
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,212,596
App. No.
18/121,753
Granted
Jan 28, 2025
Kind
B2
Abstract

The present disclosure describes systems and methods for determining a subsequent action of a simulated phishing campaign. A campaign controller identifies a starting action for a simulated phishing campaign directed to a user of a plurality of users. The simulated phishing campaign includes a plurality of actions, one or more of the plurality of actions to be determined during execution of the simulated phishing campaign The campaign controller responsive to the starting action, communicates a simulated phishing communication to one or more devices of a user. The campaign controller determines a subsequent action of the plurality of actions of the simulated phishing campaign based at least on one of a response to the simulated phishing communication received by the campaign controller or a lack of response within a predetermined time period and initiating, responsive to the determination, the subsequent action of the simulated phishing campaign.

Claims (27)

1. A method comprising:

identifying, by one or more processors, a simulated phishing campaign comprising an action of one or more actions to be determined, during execution of the simulated phishing campaign, based at least on a response by one or more users to one of the one or more actions during execution of the simulated phishing campaign;

determining, by the one or more processors during execution of the simulated phishing campaign, the action to take of the one or more actions based at least on receiving the response by the one or more users to one of the one or more actions; and

initiating, by the one or more processors during execution of the simulated phishing campaign and prior to completion of execution of the simulated phishing campaign, the action responsive to the determination.

2. The method of claim 1 , wherein the one or more actions comprise communicating a simulated phishing communication to one or more devices of the one or more users.

3. The method of claim 2 , wherein the response by the one or more users comprises the one or more users interacting with the simulated phishing communication.

4. The method of claim 1 , further comprising determining, by the one or more processors during execution of the simulated phishing campaign, the action from the one or more action to take responsive to applying one of machine learning or artificial intelligence to the response.

5. The method of claim 1 , further comprising initiating, by the one or more processors during execution of the simulated phishing campaign and prior to completion of the simulated phishing campaign, the action comprising communicating a simulated phishing communication to one or more devices of the one or more users.

6. The method of claim 1 , wherein the one of the one or more actions is a starting action of the simulated phishing campaign.

7. The method of claim 1 , further comprising identifying, by the one or more processors, the one or more actions from a template to be used for the simulated phishing campaign.

8. The method of claim 1 , further comprising identifying, by the one or more processors, the timing of the action and initiating the action responsive to the timing.

9. The method of claim 1 , further comprising identifying, by the one or more processors, a type of simulated phishing communication to use for the action and initiating the action comprising a simulated phishing communication of the type of simulated phishing communication to one or more devices of the one or more users.

10. The method of claim 1 , further comprising determining, by a controller configured on the one or more processors, the action to take, wherein the controller is configured to control execution of the simulated phishing campaign.

11. A system comprising:

by one or more processors, coupled to memory and configured to:

identify a simulated phishing campaign comprising an action of one or more actions to be determined, during execution of the simulated phishing campaign, based at least on a response by one or more users to one of the one or more actions during execution of the simulated phishing campaign;

determine, during execution of the simulated phishing campaign, the action to take of the one or more actions based at least on receiving the response by the one or more users to one of the one or more actions; and

initiate, during execution of the simulated phishing campaign and prior to completion of execution of the simulated phishing campaign, the action responsive to the determination.

12. The system of claim 11 , wherein the one or more actions comprise communicating a simulated phishing communication to one or more devices of the one or more users.

13. The system of claim 12 , wherein the response by the one or more users comprises the one or more users interacting with the simulated phishing communication.

14. The system of claim 11 , wherein the one or more processors are further configured to determine, during execution of the simulated phishing campaign, the action from the one or more action to take responsive to applying one of machine learning or artificial intelligence to the response.

15. The system of claim 11 , wherein the one or more processors are further configured to initiate, during execution of the simulated phishing campaign and prior to completion of the simulated phishing campaign, the action comprising communicating a simulated phishing communication to one or more devices of the one or more users.

16. The system of claim 11 , wherein the one of the one or more actions is a starting action of the simulated phishing campaign.

17. The system of claim 11 , wherein the one or more processors are further configured to identify the one or more actions from a template to be used for the simulated phishing campaign.

18. The system of claim 11 , wherein the one or more processors are further configured to identify the timing of the action and initiating the action responsive to the timing.

19. The system of claim 11 , wherein the one or more processors are further configured to identify a type of simulated phishing communication to use for the action and initiating the action comprising a simulated phishing communication of the type of simulated phishing communication to one or more devices of the one or more users.

20. The system of claim 11 , wherein a controller configured on the one or more processors is configured to determine the action to take, wherein the controller is further configured to control execution of the simulated phishing campaign.

Assignments (2)
PATENT SECURITY AGREEMENT Recorded Aug 8, 2025
From: KNOWBE4, INC.
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 072337/0277 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 22, 2023
From: SJOUWERMAN, STU
To: KNOWBE4, INC.
Reel/Frame 063060/0613 →
Continuity (4)
Continuation 17130281 · Dec 22, 2020
Continuation 15799549 · Oct 31, 2017
Provisional Application 62415390 · Oct 31, 2016
Related Publication 20230216879A1 · Jul 6, 2023
References Cited (190)
US 6892089B1 · Prince et al. · 2005 [cited by applicant]
US 7599992B2 · Nakajima · 2009 [cited by applicant]
US 8041769B2 · Shraim et al. · 2011 [cited by applicant]
US 8131655B1 · Cosoi et al. · 2012 [cited by applicant]
US 8170966B1 · Musat et al. · 2012 [cited by applicant]
US 8464346B2 · Barai et al. · 2013 [cited by applicant]
US 8484741B1 · Chapman · 2013 [cited by applicant]
US 8615807B1 · Higbee · 2013 [cited by examiner]
US 8635703B1 · Belani · 2014 [cited by examiner]
US 8719940B1 · Higbee · 2014 [cited by examiner]
US 8793799B2 · Fritzson et al. · 2014 [cited by applicant]
US 8910287B1 · Belani et al. · 2014 [cited by applicant]
US 8966637B2 · Belani et al. · 2015 [cited by applicant]
US 9053326B2 · Higbee et al. · 2015 [cited by applicant]
US 9208235B1 · Liu · 2015 [cited by applicant]
US 9246936B1 · Belani · 2016 [cited by examiner]
US 9253207B2 · Higbee et al. · 2016 [cited by applicant]
US 9262629B2 · Belani et al. · 2016 [cited by applicant]
US 9325730B2 · Higbee et al. · 2016 [cited by applicant]
US 9356948B2 · Higbee et al. · 2016 [cited by applicant]
US 9373267B2 · Sadeh-Koniecpol et al. · 2016 [cited by applicant]
US 9398029B2 · Sadeh-Koniecpol et al. · 2016 [cited by applicant]
US 9398038B2 · Higbee et al. · 2016 [cited by applicant]
US 9591017B1 · Higbee et al. · 2017 [cited by applicant]
US 9635052B2 · Hadnagy · 2017 [cited by applicant]
US 9667645B1 · Belani · 2017 [cited by examiner]
US 9674221B1 · Higbee et al. · 2017 [cited by applicant]
US 9729573B2 · Gatti · 2017 [cited by applicant]
US 9813454B2 · Sadeh-Koniecpol et al. · 2017 [cited by applicant]
US 9870715B2 · Sadeh-Koniecpol et al. · 2018 [cited by applicant]
US 9876753B1 · Hawthorn · 2018 [cited by applicant]
US 9894092B2 · Irimie et al. · 2018 [cited by applicant]
US 9912687B1 · Wescoe et al. · 2018 [cited by applicant]
US 9942249B2 · Gatti · 2018 [cited by applicant]
US 9998480B1 · Gates et al. · 2018 [cited by applicant]
US 10063584B1 · Wescoe et al. · 2018 [cited by applicant]
US 10243904B1 · Wescoe et al. · 2019 [cited by applicant]
US 10904186B1 · Everton et al. · 2021 [cited by applicant]
US 10938859B2 · Chalmers et al. · 2021 [cited by applicant]
US 10986122B2 · Bloxham et al. · 2021 [cited by applicant]
US 11044267B2 · Jakobsson et al. · 2021 [cited by applicant]
US 11184393B1 · Gendre et al. · 2021 [cited by applicant]
US 11297094B2 · Huda · 2022 [cited by applicant]
US 20020178383A1 · Hrabik et al. · 2002 [cited by applicant]
US 20040006747A1 · Tyler · 2004 [cited by applicant]
US 20040073617A1 · Milliken et al. · 2004 [cited by applicant]
US 20050198175A1 · Thomas et al. · 2005 [cited by applicant]
US 20050246440A1 · Yu · 2005 [cited by applicant]
US 20050262209A1 · Yu · 2005 [cited by applicant]
US 20060002532A1 · Horvitz et al. · 2006 [cited by applicant]
US 20060068755A1 · Shraim et al. · 2006 [cited by applicant]
US 20060069697A1 · Shraim et al. · 2006 [cited by applicant]
US 20070011324A1 · Mehr et al. · 2007 [cited by applicant]
US 20070142030A1 · Sinha et al. · 2007 [cited by applicant]
US 20070294352A1 · Shraim et al. · 2007 [cited by applicant]
US 20070299777A1 · Shraim et al. · 2007 [cited by applicant]
US 20080104187A1 · Wilson et al. · 2008 [cited by applicant]
US 20090088871A1 · Moor et al. · 2009 [cited by applicant]
US 20090259537A1 · Veksler et al. · 2009 [cited by applicant]
US 20100095374A1 · Gillum et al. · 2010 [cited by applicant]
US 20100211641A1 · Yih et al. · 2010 [cited by applicant]
US 20100269175A1 · Stolfo et al. · 2010 [cited by applicant]
US 20110055922A1 · Cohen et al. · 2011 [cited by applicant]
US 20110106890A1 · Karpov et al. · 2011 [cited by applicant]
US 20120012467A1 · Coelho Tsou et al. · 2012 [cited by applicant]
US 20120124671A1 · Fritzson · 2012 [cited by examiner]
US 20120258437A1 · Sadeh-Koniecpol et al. · 2012 [cited by applicant]
US 20130007127A1 · Chen et al. · 2013 [cited by applicant]
US 20130198846A1 · Chapman · 2013 [cited by applicant]
US 20130203023A1 · Sadeh-Koniecpol et al. · 2013 [cited by applicant]
US 20130219495A1 · Kulaga et al. · 2013 [cited by applicant]
US 20130263226A1 · Sudia · 2013 [cited by applicant]
US 20130297375A1 · Chapman · 2013 [cited by applicant]
US 20130312101A1 · Lotem et al. · 2013 [cited by applicant]
US 20140069866A1 · Okun · 2014 [cited by applicant]
US 20140096215A1 · Hessler · 2014 [cited by applicant]
US 20140173726A1 · Varenhorst · 2014 [cited by applicant]
US 20140199663A1 · Sadeh-Koniecpol et al. · 2014 [cited by applicant]
US 20140199664A1 · Sadeh-Koniecpol et al. · 2014 [cited by applicant]
US 20140201835A1 · Emigh et al. · 2014 [cited by applicant]
US 20140230061A1 · Higbee et al. · 2014 [cited by applicant]
US 20140230064A1 · Higbee et al. · 2014 [cited by applicant]
US 20140230065A1 · Belani et al. · 2014 [cited by applicant]
US 20140281946A1 · Avni et al. · 2014 [cited by applicant]
US 20150163242A1 · Laidlaw et al. · 2015 [cited by applicant]
US 20150180896A1 · Higbee et al. · 2015 [cited by applicant]
US 20150229664A1 · Hawthorn et al. · 2015 [cited by applicant]
US 20150264084A1 · Kashyap et al. · 2015 [cited by applicant]
US 20150356085A1 · Panda et al. · 2015 [cited by applicant]
US 20160003689A1 · Rankin · 2016 [cited by applicant]
US 20160036829A1 · Sadeh-Koniecpol et al. · 2016 [cited by applicant]
US 20160099963A1 · Mahaffey et al. · 2016 [cited by applicant]
US 20160142439A1 · Goutal · 2016 [cited by applicant]
US 20160164898A1 · Belani et al. · 2016 [cited by applicant]
US 20160173510A1 · Harris et al. · 2016 [cited by applicant]
US 20160234245A1 · Chapman · 2016 [cited by applicant]
US 20160261618A1 · Koshelev · 2016 [cited by applicant]
US 20160301705A1 · Higbee et al. · 2016 [cited by applicant]
US 20160301716A1 · Sadeh-Koniecpol et al. · 2016 [cited by applicant]
US 20160308897A1 · Chapman · 2016 [cited by applicant]
US 20160330238A1 · Hadnagy · 2016 [cited by applicant]
US 20170026410A1 · Gatti · 2017 [cited by applicant]
US 20170078322A1 · Seiver et al. · 2017 [cited by applicant]
US 20170103674A1 · Sadeh-Koniecpol et al. · 2017 [cited by applicant]
US 20170104778A1 · Shabtai · 2017 [cited by examiner]
US 20170140663A1 · Sadeh-Koniecpol et al. · 2017 [cited by applicant]
US 20170155666A1 · Seul et al. · 2017 [cited by applicant]
US 20170193386A1 · Qin · 2017 [cited by applicant]
US 20170237776A1 · Higbee et al. · 2017 [cited by applicant]
US 20170244746A1 · Hawthorn et al. · 2017 [cited by applicant]
US 20170251009A1 · Irimie et al. · 2017 [cited by applicant]
US 20170251010A1 · Irimie et al. · 2017 [cited by applicant]
US 20170318046A1 · Weidman · 2017 [cited by applicant]
US 20170331848A1 · Alsaleh et al. · 2017 [cited by applicant]
US 20180041537A1 · Bloxham et al. · 2018 [cited by applicant]
US 20180069866A1 · Chalmers et al. · 2018 [cited by applicant]
US 20180103052A1 · Choudhury et al. · 2018 [cited by applicant]
US 20180159888A1 · Irimie et al. · 2018 [cited by applicant]
US 20190173819A1 · Wescoe et al. · 2019 [cited by applicant]
US 20190215335A1 · Benishti · 2019 [cited by applicant]
US 20190245885A1 · Starink et al. · 2019 [cited by applicant]
US 20190245894A1 · Epple et al. · 2019 [cited by applicant]
US 20200311260A1 · Klonowski et al. · 2020 [cited by applicant]
US 20210075827A1 · Grealish · 2021 [cited by applicant]
US 20210185075A1 · Adams · 2021 [cited by applicant]
US 20210194924A1 · Heinemeyer et al. · 2021 [cited by applicant]
US 20210407308A1 · Brubaker et al. · 2021 [cited by applicant]
US 20220005373A1 · Nelson et al. · 2022 [cited by applicant]
US 20220006830A1 · Wescoe · 2022 [cited by applicant]
US 20220078207A1 · Chang et al. · 2022 [cited by applicant]
US 20220094702A1 · Saad Ahmed et al. · 2022 [cited by applicant]
US 20220100332A1 · Haworth et al. · 2022 [cited by applicant]
US 20220116419A1 · Kelm et al. · 2022 [cited by applicant]
US 20220130274A1 · Krishna Raju et al. · 2022 [cited by applicant]
US 20220286419A1 · Stetzer et al. · 2022 [cited by applicant]
EP 3582468A1 · 2019 [cited by applicant]
WO WO2016164844A1 · 2016 [cited by applicant]
Abu-Nimeh et al., “A Comparison of Machine Learning Techniques for Phishing Detection,” eCrime '07: Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit, Oct. 4-5, 2007, pp. 60-69, ACM Di… [cited by applicant]
Basnet et al., “Detection of Phishing Attacks: A Machine Learning Approach,” Soft Computing Applications in Industry, STUDFUZZ 226, Ed. by B. Prasad, 2008, pp. 373-383. [cited by applicant]
Caputo, et al. “Going spear phishing: Exploring embedded training and awareness.” IEEE Security & Privacy 12.1 (2013): 28-38. (Year: 2013). [cited by applicant]
Castillo et al., “Detecting phishing e-mails by heterogeneous classification.” International Conference on Intelligent Data Engineering and Automated Learning. Springer, Berlin, Heidelberg, 2007. (Year: 2007). [cited by applicant]
Chandrasekaran et al., “Phishing Email Detection Based on Structural Properties”, In NYS Cyber Security Conference, 2006 (Year 2006). [cited by applicant]
Final Office Action on U.S. Appl. No. 17/004,950 DTD Feb. 1, 2023. [cited by applicant]
Jakobsson et al., “Designing Ethical Phishing Experiments: A study of (ROT13) rOnl query features,” In the Proceedings of the 15th international conference on World Wide Web (WWW '06), ACM, New York, NY, USA, pp. 513-52… [cited by applicant]
Notice of Allowance on U.S. Appl. No. 17/004,950 DTD Mar. 2, 2023. [cited by applicant]
Notice of Allowance on U.S. Appl. No. 17/130,281 DTD Feb. 17, 2023. [cited by applicant]
NPL Search Results (Year: 2020). [cited by applicant]
NPL Search Terms (Year 2020). [cited by applicant]
NPL Search Terms (Year: 2021). [cited by applicant]
NPL Search Terms (Year: 2022). [cited by applicant]
NPL Search Terms (Year: 2023). [cited by applicant]
Palka et al., “Dynamic phishing content using generative grammars,” Software Testing, Verification and Validation Workshops (ICSTW), 2015 IEEE Eighth International Conference, Date of Conference: Apr. 13-17, 2015, IEEE … [cited by applicant]
Park, “Text-Based Phishing Detection Using a Simulation Model” (2013) (Year 2013). [cited by applicant]
Park, “Text-Based Phishing Detection Using A Simulation Model,” Open Access Theses. 137. 2017. (96 pp). https://docs.lib.purdue.edu/open_access_theses/137/. [cited by applicant]
US Final Office Action on US Appl. U.S. Appl. No. 15/798,187 dated Apr. 24, 2020 (19 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 15/798,187 dated Jun. 21, 2019 (18 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 15/799,543 dated Jan. 9, 2020 (18 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 15/799,549 dated Jan. 30, 2020 (25 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/004,950 dated Feb. 16, 2021 (17 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/004,950 dated Jul. 5, 2022 (18 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/004,950 dated Nov. 12, 2021 (18 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/130,281 dated Jul. 13, 2021 (19 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/130,281 dated Mar. 14, 2022 (20 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/130,281 dated Nov. 30, 2022 (8 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 17/385,526 dated Feb. 18, 2022 (20 Pages). [cited by applicant]
US Final Office Action on U.S. Appl. No. 15/798,187 dated Aug. 6, 2018 (17 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 15/798,187 dated Feb. 7, 2019 (20 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 15/798,187 dated Jan. 11, 2018 (17 pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 15/798,187 dated Jan. 30, 2020 (20 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 15/799,543 dated Aug. 1, 2019 (13 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 15/799,549 dated Jun. 10, 2020 (27 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 15/799,549 dated Sep. 16, 2019 (24 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/004,950 dated Jul. 8, 2021 (17 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/004,950 dated Mar. 18, 2022 (18 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/004,950 dated Nov. 10, 2020 (10 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/004,950 dated Oct. 18, 2022 (18 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/107,294 dated Feb. 2, 2021 (21 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/130,281 dated Apr. 1, 2021 (18 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/130,281 dated Aug. 16, 2022 (20 Pages). [cited by applicant]
US Non-Final Office Action on U.S. Appl. No. 17/130,281 dated Nov. 24, 2021 (20 Pages). [cited by applicant]
US Non-Final US Office Action on U.S. Appl. No. 17/385,526 dated Nov. 10, 2021 (19 Pages). [cited by applicant]
US Notice of Allowance on U.S. Appl. No. 15/798,187 dated Oct. 15, 2020 (10 Pages). [cited by applicant]
US Notice of Allowance on U.S. Appl. No. 15/799,543 dated Jul. 2, 2020 (14 Pages). [cited by applicant]
US Notice of Allowance on U.S. Appl. No. 15/799,549 dated Oct. 28, 2020 (10 Pages). [cited by applicant]
US Notice of Allowance on U.S. Appl. No. 17/107,294 dated May 19, 2021 (10 Pages). [cited by applicant]
US Notice of Allowance on U.S. Appl. No. 17/385,526 dated Jul. 7, 2022 (10 Pages). [cited by applicant]
Xiang et al., “Cantina : A Feature-Rich Machine Learning Framework for Detecting Phishing Web Sites,” ACM Trans. Inf. Syst. Secur, vol. 14, Issue 2, Article 21, pp. 1-28. [cited by applicant]
Yang et al., “Building an Anti-Phishing Game to Enhance Network Security Literacy Learning,” Advanced Learning Technologies (ICALT), 2012 12th IEEE International Conference on Advanced Learning Technologies, pp. 121-123. [cited by applicant]
NPL Search Terms (Year: 2024). [cited by applicant]
US Notice of Allowance on U.S. Appl. No. 17/897,212 Dated Jul. 11, 2024 (8 pages). [cited by applicant]