US 12,015,623 B2
Systems and methods for consensus driven threat intelligence
John Mullins, Riverview, FL (US); and Wendy Bartlett, Odessa, FL (US)
Assigned to SECUREWORKS CORP., Wilmington, DE (US)
Filed by Secureworks Corp., Wilmington, DE (US)
Filed on Jun. 24, 2022, as Appl. No. 17/848,714.
Prior Publication US 2023/0421578 A1, Dec. 28, 2023
Int. Cl. H04L 9/40 (2022.01); H04L 9/32 (2006.01)
CPC H04L 63/1416 (2013.01) [H04L 9/3247 (2013.01); H04L 9/3297 (2013.01); H04L 63/1425 (2013.01); H04L 63/1433 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for consensus driven threat intelligence utilizing a blockchain network, the method comprising:
receiving a threat intelligence request directed to at least one of one or more smart contracts implemented on a blockchain of the blockchain network and distributed to a plurality of nodes of the blockchain network, the threat intelligence request to include a request to gather intelligence related to a potential threat;
broadcasting the threat intelligence request to one or more oracles configured to connect external information regarding potential threats to the blockchain;
broadcasting the threat intelligence request from the one or more oracles to one or more corresponding nodes of the plurality of nodes;
gathering threat intelligence data relating to the threat intelligence request at each of the one or more corresponding nodes;
determining, via a threat intelligence operation conducted at each of the one or more corresponding nodes and based on gathered threat intelligence data, a validation or invalidation of the potential threat;
determining whether a consensus has been reached as to whether the potential threat is valid or invalid as determined by the threat intelligence operations conducted by each of the one or more corresponding nodes;
if a consensus is reached, submitting a threat entry including the gathered threat intelligence data relating to the determination of whether the potential threat of the threat intelligence request is valid or invalid resulting from the threat intelligence operations conducted by each of the one or more corresponding nodes to the at least one of the one or more smart contracts; and
storing and sorting each threat entry on the blockchain using the smart contract.