US 11,991,193 B2
Relationship-based conversion of cyber threat data into a narrative-like format
Nathan Sherwood, Toronto (CA); and Tina L. Zeng, Montebello, CA (US)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Sep. 8, 2022, as Appl. No. 17/940,165.
Application 17/940,165 is a continuation of application No. 16/817,997, filed on Mar. 13, 2020, granted, now 11,503,047.
Prior Publication US 2022/0417271 A1, Dec. 29, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 3/048 (2013.01); G06F 3/0484 (2022.01); H04L 9/40 (2022.01)
CPC H04L 63/1416 (2013.01) [G06F 3/0484 (2013.01)] 22 Claims
OG exemplary drawing
 
1. A method, in a data processing system, for displaying cyber threat data in a narrative format, the method comprising:
receiving a cyber threat information file, wherein the cyber threat information file comprises cyber threat data in a serialized format and in a textual cyber threat data language;
generating a tree data structure representing relationships between objects in a plurality of objects of the cyber threat data, wherein each node of the tree data structure represents an object in the cyber threat data and each edge in the tree data structure represents a relationship type between a parent object and a child object, and wherein generating the tree data structure comprises, for one or more of the objects in the plurality of objects, extracting one or more textual references, within text of the one or more objects, to identifiers of other objects in the plurality of objects;
generating a user interface presenting the cyber threat data in a narrative format based on the tree data structure, wherein the narrative format presents the objects in the plurality of objects of the cyber threat data in a hierarchical format indicative of relationships between parent objects and child objects based on the tree data structure and presents a relationship type for each child object, and wherein the narrative format is a non-graph textual representation; and
presenting the user interface to an analyst.