US 12,248,563 B1
System and method for cybersecurity analyzer update and concurrent management system
Neeraj Kulkarni, Milpitas, CA (US); Robert M. Beard, Jr., Charlotte, NC (US); and Robin Caron, Charlotte, NC (US)
Assigned to Musarubra US LLC, Plano, TX (US)
Filed by FireEye Security Holdings US LLC, San Jose, CA (US)
Filed on Apr. 24, 2023, as Appl. No. 18/138,704.
Application 18/138,704 is a continuation of application No. 16/796,541, filed on Feb. 20, 2020, granted, now 11,636,198, issued on Apr. 25, 2023.
Claims priority of provisional application 62/827,039, filed on Mar. 30, 2019.
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/54 (2013.01); G06F 8/65 (2018.01); G06F 9/54 (2006.01); G06F 21/56 (2013.01); G06F 21/57 (2013.01)
CPC G06F 21/54 (2013.01) [G06F 8/65 (2013.01); G06F 9/546 (2013.01); G06F 21/564 (2013.01); G06F 21/566 (2013.01); G06F 21/577 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A method for protecting against a cybersecurity attack during a software upgrade, the method comprising:
conducting, by a first analyzer, one or more threat evaluation operations on at least a suspicious object of a first plurality of suspicious objects, the one or more threat evaluation operations are conducted at least based on cybersecurity analytics content data;
generating a second analyzer configured to conduct one or more threat evaluation operations based on at least updated cybersecurity analytics content data that differs, at least in part, from the cybersecurity analytics content data;
responsive to the generating of the second analyzer, assigning a second plurality of suspicious objects to the second analyzer for threat evaluation that would have otherwise been directed to the first analyzer, wherein the second plurality of suspicious objects includes one or more suspicious objects of the first plurality of suspicious objects; and
comparing results from an analysis of the one or more suspicious objects by the first analyzer and results from an analysis of the one or more suspicious objects by the second analyzer operating concurrently with the first analyzer to analyze and troubleshoot the cybersecurity analytics content data and the updated cybersecurity analytics content data before transitioning an analysis of subsequent suspicious objects to be conducted by the second analyzer.