Granted Patent B2

US 12,499,241 · App. 18/462,369 · Granted Dec 16, 2025

Inventor: Gopendu Sen (Milton, CA)

Assignee: The Toronto-Dominion Bank

G06F21/577G06F8/61G06F21/53G06N3/0455G06N3/0475G06F2221/033

Abstract

Claims (55)

1 . An apparatus comprising:

a memory storing source code; and

a processor coupled to the memory, wherein the processor is configured to:

monitor communications that occur with user devices over a shared computer network,

detect a security threat from the communications,

generate a software program to simulate the security threat over the shared computer network based on execution of a generative artificial intelligence (GenAI) model on the source code and a description of the security threat,

install the source code for simulating the security threat in a digital twin of the shared computer network, and

execute the source code using the digital twin to simulate the security threat.

2 . The apparatus of claim 1 , wherein the processor is configured to:

record data from the communications in a log, and

detect the security threat based on execution of a machine learning model on the log.

3 . The apparatus of claim 2 , wherein the processor is configured to:

generate the description of the security threat based on the execution of the machine learning model on the log.

4 . The apparatus of claim 1 , wherein the processor is configured to:

monitor communications that occur between the user devices and a software application hosted on a host platform,

wherein the processor is configured to detect a vulnerability in the software application hosted by the host platform based on responses to the user devices from the software application.

5 . The apparatus of claim 1 , wherein the communications comprise one or more of:

client-server communications, network payloads, or network traffic patterns that occur on the shared computer network.

6 . The apparatus of claim 1 , wherein the digital twin is on a different computer network.

7 . The apparatus of claim 1 , wherein the processor is configured to:

generate a software patch for fixing the security threat based on execution of the GenAI model on results of the execution of the source code for simulating the security threat, and

store the software patch in the memory.

8 . A method comprising:

monitoring communications that occur with user devices over a shared computer network;

detecting a security threat from the communications;

generating a software program to simulate the security threat over the shared computer network based on execution of a generative artificial intelligence (GenAI) model on a description of the security threat and source code stored in a repository;

installing the source code for simulating the security threat in a digital twin of the shared computer network; and

executing the source code using the digital twin to simulate the security threat.

9 . The method of claim 8 , wherein the method comprises:

recording data from the communications in a log; and

detecting the security threat based on executing a machine learning model on the log.

10 . The method of claim 9 , wherein the method comprises:

generating the description of for the security threat based on the executing of the machine learning model on the log.

11 . The method of claim 8 , wherein the monitoring comprises:

monitoring communications that occur between the user devices and a software application hosted on a host platform,

wherein the detecting comprises detecting a vulnerability in the software application hosted by the host platform based on responses to the user devices from the software application.

12 . The method of claim 8 , wherein the communications comprise one or more of:

client-server communications, network payloads, or network traffic patterns that occur on the shared computer network.

13 . The method of claim 8 , wherein the digital twin is on a different computer network.

14 . The method of claim 8 , wherein the method comprises:

generating a software patch for fixing the security threat based on execution of the GenAI model on results of the execution of the source code for simulating the security threat; and

storing the software patch in a storage device.

15 . A non-transitory computer-readable medium comprising instructions that, when executed by a processor, cause the processor to perform:

monitoring communications that occur with user devices over a shared computer network;

detecting a security threat from the monitored communications;

generating a software program to simulate the security threat over the shared computer network based on execution of a generative artificial intelligence (GenAI) model on a description of the security threat and source code stored in a repository;

installing the source code for simulating the security threat in a digital twin of the shared computer network; and

executing the source code using the digital twin to simulate the security threat.

16 . The non-transitory computer-readable medium of claim 15 , wherein the instructions cause the processor to perform:

recording data from the communications in a log; and

detecting the security threat based on executing a machine learning model on the log.

17 . The non-transitory computer-readable medium of claim 15 , wherein the monitoring comprises:

monitoring communications that occur between the user devices and a software application hosted on a host platform,

wherein the detecting comprises detecting a vulnerability in the software application hosted by the host platform based on responses to the user devices from the software application.

18 . The non-transitory computer-readable medium of claim 15 , wherein the digital twin is on a different computer network.

Assignments (1)

Continuity (1)

References Cited (400)