Computer-based system for analyzing and quantifying cyber threat patterns and methods of use thereof

1. A method, comprising:

automatically receiving, by a processor in an enterprise computing environment of an enterprise, a plurality of data values that represent numerous attempts of a plurality of cyber-attacks launched against a plurality of computing devices associated with the enterprise; and

determining, by the processor, from the plurality of data values that represent the numerous attempts of the plurality of cyber-attacks:

i) a cyber-attack type,

ii) a frequency of attempts of the plurality of cyber-attacks to target the enterprise computing environment of the enterprise during a time period, and

iii) a frequency of contact of the plurality of cyber-attacks with the enterprise computing environment of the enterprise during the time period; and

determining, by the processor, a cyber-attack event frequency value of the plurality of cyber-attacks over the time period based at least in part on:

i) the cyber-attack type,

ii) the frequency of attempts of the plurality of cyber-attacks, and

iii) the frequency of contact of the plurality of cyber-attacks; and

continuously calculating, by the processor, in real-time, a cyber-attack event frequency half-life value, wherein the cyber-attack event frequency half-life value is a time period for the cyber-attack event frequency value to decrease by a half;

causing, by the processor, to present a visual cyber-attack representation for each cyber-attack type to show the cyber-attack event frequency half-life value of each cyber-attack type as a function of time on a display device; and

continuously updating, by the processor, in real-time, the visual cyber-attack representation for each cyber-attack type.

2. The method of claim 1 , further comprising:

receiving, by the processor, a user request to monitor one of a plurality of cyber-attack types; and

causing, by the processor, the visual cyber-attack representation of the one of the plurality of cyber-attack types requested by the user on the display device.

3. The method of claim 1 , and further comprising:

receiving, by the processor, from a user on an input device, a request to capture a window of time of the time period for a user requested cyber-attack type; and

causing, by the processor, the visual cyber-attack representation for the window of time of the time period for the user requested cyber-attack type on the display device.

4. The method of claim 3 , wherein the visual cyber-attack representation as a function of time for each of a plurality of cyber-attack types is an interactive visual cyber-attack representation, further comprising:

receiving, by the processor, from the user on the input device, a request to capture a plurality of windows of time of the time period for the user requested cyber-attack type; and

causing, by the processor, the visual cyber-attack representation for the user requested cyber-attack type on the display device.

5. The method of claim 1 , further comprising:

receiving input, by the processor, from a user on an input device, a request to modify a dataset for the cyber-attack type;

wherein the input received by the user overrides the determination of the cyber-attack event frequency value for the received input of the dataset for the cyber-attack type; and

causing, by the processor, the visual cyber-attack representation of the modified dataset on the display device.

6. The method of claim 1 , further comprising:

receiving input, by the processor, from a user on an input device, a request to create a dataset for a user input cyber-attack type, wherein the input received by the user creates the user input cyber-attack type; and

causing, by the processor, the visual cyber-attack representation of the user input cyber-attack type on the display device.

7. The method of claim 1 , further comprising:

receiving, by the processor, a plurality of data values from multiple frameworks of data values representing a plurality of cyber-attack types; and

categorizing and generating, by the processor, the plurality of cyber-attack types into a uniform data format of the plurality of cyber-attack types.

8. The method of claim 7 , wherein the uniform data format is a plurality of cyber-attack phases format.

9. The method of claim 7 , further comprising:

compiling and updating, by the processor, a library of the plurality of cyber-attack types,

wherein the library of the plurality of cyber-attack types is categorized by the uniform data format.

10. The method of claim 9 , further comprising utilizing, by the processor, a machine learning model to automatically compile and update the library of the plurality of cyber-attack types.

11. A system, comprising:

an enterprise computing environment having a processor; and

a memory storing instructions which, when executed by the processor, causes the processor to:

automatically receive a plurality of data values that represent numerous attempts of a plurality of cyber-attacks launched against a plurality of computing devices associated with the enterprise computing environment;

determine, from the plurality of data values that represent the numerous attempts of the plurality of cyber-attacks:

i) a cyber-attack type,

ii) a frequency of attempts of the plurality of cyber-attacks to target the enterprise computing environment of the enterprise during a time period, and

iii) a frequency of contact of the plurality of cyber-attacks with the enterprise computing environment of the enterprise during the time period; and

determine, a cyber-attack threat event frequency value of the plurality of cyber-attacks over the time period based at least in part on:

i) the cyber-attack type,

ii) the frequency of attempts of the plurality of cyber-attacks, and

iii) the frequency of contact of the plurality of cyber-attacks; and

calculate continuously, in real-time, a cyber-attack threat event frequency half-life value, wherein the cyber-attack threat event frequency half-life value is a time period for the cyber-attack threat event frequency value to decrease by a half;

causing, by the processor, to present a visual cyber-attack representation for each cyber-attack type to show the cyber-attack event frequency half-life value of each cyber-attack type as a function of time on a display device; and

continuously updating, by the processor, in real-time, the visual cyber-attack representation for each cyber-attack type.

12. The system of claim 11 , wherein the instructions further cause the processor to:

receive a user request to monitor one of a plurality of cyber-attack types; and

cause the visual cyber-attack representation of the one of the plurality of cyber-attack types requested by the user on the display device.

13. The system of claim 11 , wherein the instructions further cause the processor to:

receive from a user on an input device, a request to capture a window of time of the time period for a user requested cyber-attack type; and

cause the visual cyber-attack representation for the window of time of the time period for the user requested cyber-attack type on the display device.

14. The system of claim 13 , wherein the visual cyber-attack representation as a function of time for each of a plurality of cyber-attack types is an interactive visual cyber-attack representation, and wherein the instructions further cause the processor to:

receive from the user on the input device, a request to capture a plurality of windows of time of the time period for the user requested cyber-attack type; and

causes the visual cyber-attack representation for the user requested cyber-attack type on the display device.

15. The system of claim 11 , wherein the instructions further cause the processor to:

receive input from a user on an input device, a request to modify a dataset for the cyber-attack type;

wherein the input received by the user overrides the determination of the cyber-attack event frequency value for the received input of the dataset for the cyber-attack type; and

causes the visual cyber-attack representation of the modified dataset on the display device.

16. The system of claim 11 , wherein the instructions further cause the processor to:

receive input from a user on an input device, a request to create a dataset for a user input cyber-attack type, wherein the input received by the user creates a user input cyber-attack type; and

causes the visual cyber-attack representation of the user input cyber-attack type on the display device.

17. The system of claim 11 , wherein the instructions further cause the processor to:

receive a plurality of data values from multiple frameworks of data values representing a plurality of cyber-attack types; and

categorize and generate the plurality of cyber-attack types into a uniform data format of the plurality of cyber-attack types.

18. The method of claim 17 , wherein the uniform data format is a plurality of cyber-attack phases format.

19. The system of claim 11 , wherein the instructions further cause the processor to compile and update a library of cyber-attack types of the plurality of cyber-attacks.

20. The system of claim 19 , wherein the instructions further cause the processor to:

compile and update, a library of the plurality of cyber-attack types,

wherein the library of the plurality of cyber-attack types is categorized by a uniform data format.