{
  "patent_number": "US 20240406210",
  "country": "US",
  "title": "How AI Explains Cyberattacks for Security Training",
  "original_title": "Cyber security training tool that uses a large language model",
  "summary": "This patent describes a cybersecurity training tool that uses a large language model to explain why machine learning identified a cyber threat, based on both fake and real attacks, for security teams and regular users.",
  "what_it_does": "The cyber security training tool uses a natural language processor and a large language model (LLM) to analyze cyberattacks. It can look at both a 'synthetic cyberattack' in a fake network that mirrors a real one, and a 'real cyberattack' happening in the actual network (Claim 1). The tool then provides an analysis and explanation, using the LLM, for why machine learning flagged these attacks as threats. This explanation is designed for training either regular users or cybersecurity team members. For example, it can use the LLM to highlight malicious parts of an email, like a phishing attempt, and explain immediately on screen why the email is dangerous (Claims 4, 5).",
  "what_it_does_not_cover": [
    "Does not cover cybersecurity training that relies solely on human instructors without machine learning analysis of threats.",
    "Does not cover systems that only analyze real cyberattacks without also using a mimic network for synthetic attacks.",
    "Does not cover training tools that explain cyber threats without using a large language model.",
    "Does not cover general IT security awareness training that isn't specifically tied to machine learning's identification of a threat.",
    "Does not cover systems that only provide long-form reports days later, rather than immediate, on-the-spot feedback for users.",
    "Does not cover training that doesn't involve a user interface displaying the explanation and understanding of the machine learning."
  ],
  "filed": "2024-05-30",
  "granted": null,
  "expires": "2044-05-30",
  "status": "active",
  "holder": "Darktrace Holdings",
  "holder_url": "https://patentbrief.org/company/darktrace-holdings",
  "inventors": [
    {
      "name": "Dickon Humphrey",
      "url": "https://patentbrief.org/inventor/dickon-humphrey"
    },
    {
      "name": "John Boyer",
      "url": "https://patentbrief.org/inventor/john-boyer"
    },
    {
      "name": "Philip Sellars",
      "url": "https://patentbrief.org/inventor/philip-sellars"
    },
    {
      "name": "Timothy Bazalgette",
      "url": "https://patentbrief.org/inventor/timothy-bazalgette"
    },
    {
      "name": "Jake Lal",
      "url": "https://patentbrief.org/inventor/jake-lal"
    }
  ],
  "times_cited": 13,
  "tags": [
    "cybersecurity",
    "software",
    "ai_ml",
    "telecommunications",
    "consumer_electronics"
  ],
  "abstract": "The cyber security training tool has a natural language processor and a large language model to be able to analyze both i) a synthetic cyberattack in a mimic network corresponding to a real world network as well as ii) a real cyberattack in the real world network. The cyber security training tool can then provide analysis and an explanation as to why machine learning identified the synthetic cyberattack and/or the real cyberattack as a cyber threat for a purpose of providing cyber security training to at least one of i) an end user of the real world network and ii) a cyber security team member for the real world network. The cyber security training tool further has a user interface component to display security awareness training for the synthetic cyberattack and/or the real cyberattack, and to show the end user and/or the cyber security team member an understanding of the machine learning of the synthetic cyberattack and/or the real cyberattack displayed in the user interface component.",
  "url": "https://patentbrief.org/patent/us/20240406210/cyber-security-training-tool-that-uses-a-large-language-model",
  "markdown_url": "https://patentbrief.org/patent/us/20240406210/cyber-security-training-tool-that-uses-a-large-language-model/md",
  "google_patents_url": "https://patents.google.com/patent/US20240406210",
  "relatedPatents": [
    {
      "patentNumber": "11606373",
      "countryCode": "US",
      "title": "AI System That Learns Normal Email Use to Spot and Stop Cyber Threats",
      "url": "https://patentbrief.org/patent/us/11606373/cyber-threat-defense-system-protecting-email-networks-with-machine-learning-mode"
    },
    {
      "patentNumber": "12438891",
      "countryCode": "US",
      "title": "How Multiple AI Models Detect Unusual Behavior on Computer Networks",
      "url": "https://patentbrief.org/patent/us/12438891/anomaly-detection-based-on-ensemble-machine-learning-model"
    },
    {
      "patentNumber": "12353827",
      "countryCode": "US",
      "title": "Using Non-AI Systems to Improve AI Text Generation",
      "url": "https://patentbrief.org/patent/us/12353827/computer-implemented-methods-for-the-automated-analysis-or-use-of-data-including"
    },
    {
      "patentNumber": "12307349",
      "countryCode": "US",
      "title": "How an AI System Answers Financial Questions Using Specialized Bots",
      "url": "https://patentbrief.org/patent/us/12307349/systems-and-methods-of-large-language-model-driven-orchestration-of-task-specifi"
    },
    {
      "patentNumber": "12518214",
      "countryCode": "US",
      "title": "Training AI on Private Data Without Seeing It",
      "url": "https://patentbrief.org/patent/us/12518214/distributed-machine-learning-systems-including-generation-of-synthetic-data"
    }
  ]
}