Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A cyber security system includes a plurality of event sensors to detect events, a plurality of inference servers, and a server in communication with the plurality of inference servers. Each inference server of the plurality is in communication with a subset of event sensors of the plurality of event sensors. Each inference server has a portion of an event lattice and is to compare the event detected by the subset of event sensors to the event lattice. Each inference server is to identify an originator having a behavior pattern indicative of an attack and communicating an identifier associated with the originator. The server is to provide an interface indicating the behavior pattern indicative of an attack and the identifier of the originator.

Abstract: A method of determining a set of prescribed actions includes receiving a configuration script identifying a set of influencers, a set of performance indicators, a model type, a target time, and a prescription method. The method further includes deriving a model of the model type based on data associated with the set of influencers or with the set of performance indicators. The method also includes projecting a set of future influencer values associated with the set of influencers and projecting a set of future indicator values of the set of performance indicators at the target time using the model. The method can further include prescribing using the prescription method and based on projecting using the model a set of prescribed actions associated with the subset of actionable influencers. The method also includes displaying the set of prescribed actions.

Abstract: A method of determining a set of prescribed actions includes receiving a configuration script identifying a set of influencers, a set of performance indicators, a model type, a target time, and a prescription method. The method further includes deriving a model of the model type based on data associated with the set of influencers or with the set of performance indicators. The method also includes projecting a set of future influencer values associated with the set of influencers and projecting a set of future indicator values of the set of performance indicators at the target time using the model. The method can further include prescribing using the prescription method and based on projecting using the model a set of prescribed actions associated with the subset of actionable influencers. The method also includes displaying the set of prescribed actions.

Abstract: A method of determining a set of prescribed actions includes receiving a configuration script identifying a set of influencers, a set of performance indicators, a model type, a target time, and a prescription method. The method further includes deriving a model of the model type based on data associated with the set of influencers or with the set of performance indicators. The method also includes projecting a set of future influencer values associated with the set of influencers and projecting a set of future indicator values of the set of performance indicators at the target time using the model. The method can further include prescribing using the prescription method and based on projecting using the model a set of prescribed actions associated with the subset of actionable influencers. The method also includes displaying the set of prescribed actions.

Abstract: A method of determining a set of prescribed actions includes receiving a configuration script identifying a set of influencers, a set of performance indicators, a model type, a target time, and a prescription method. The method further includes deriving a model of the model type based on data associated with the set of influencers or with the set of performance indicators. The method also includes projecting a set of future influencer values associated with the set of influencers and projecting a set of future indicator values of the set of performance indicators at the target time using the model. The method can further include prescribing using the prescription method and based on projecting using the model a set of prescribed actions associated with the subset of actionable influencers. The method also includes displaying the set of prescribed actions.