CLIAMS:We claim:
1. A method for optimizing an automated determination in real-time of a risk rating of a cyber-attack, the method comprising:
extracting, by a processor of a cyber-attack management computing device, in real time threat data from received incident data on each of one or more current cyber-attacks from one or more security issue identification systems;
retrieving, by the processor of the cyber-attack management computing device, in real time classified data associated with one of a plurality of prior cyber-attacks based on the extracted threat data for each of the one or more current cyber-attacks from one or more security incident databases;
determining and providing, by the processor of the cyber-attack management computing device, in real time one of a plurality of risk priorities for each of the one or more current cyber-attacks based on a calculated risk rating value for each of the one or more current cyber-attacks.
2. The method as set forth in claim 1 further comprising:
identifying, by the processor of the cyber-attack management computing device, one of a plurality of automated resolutions for each of the one or more current cyber-attacks based on the retrieved classified data; and
automatically executing, by the processor of the cyber-attack management computing device, the identified one of the plurality of automated resolutions for each of the one or more current cyber-attacks in an order based on the determined one of the plurality of risk priorities for each of one or more current cyber-attacks.
3. The method as set forth in claim 1 further comprising outputting, by the processor of the cyber-attack management computing device, the extracted threat data for any of the one or more current cyber-attacks which does not match the classified data associated with any of the plurality of prior cyber-attacks.
4. The method as set forth in claim 1 further comprising determining, by the processor of the security managementcomputing device, the calculated risk rating value for each of the one or more current cyber-attacks based on asset criticality and a probability of exploitation value for each asset associated with each of the one or more current cyber-attacks.

5. The method as set forth in claim 4 further comprising:
obtaining, by the processor of the cyber-attack management computing device, stored asset profile information on each asset associated with each of the one or more current cyber-attacks;
determining, by the processor of the cyber-attack management computing device, the asset criticality of each asset associated with each of the one or more current cyber-attacks based on the stored asset profile information on each asset associated with each of the one or more current cyber-attacks;
obtaining, by the processor of the cyber-attack management computing device, the probability of exploitation value of each asset associated with each of the one or more current cyber-attacks.
6. The method as set forth in claim 1 wherein the plurality of risk priorities comprises one of a high risk priority threshold, a medium risk priority threshold, or a low risk priority threshold
7. The method as set forth in claim 1 further comprising:
determining, by the processor of the cyber-attack management computing device, when one of the plurality of automated resolutions is not a match with one or more current cyber-attacks; and
outputting, by the processor of the cyber-attack management computing device, the one of the plurality of risk priorities and the retrieved classified data for each of the one or more current cyber-attacks determined not to have a match with one of the plurality of automated resolutions for generation of new resolution for the plurality of automated resolutions.
8. A cyber-attack management computing device comprising:
at least one processor; and
a memory coupled to the processor which is configured to be capable of executing programmed instructions comprising and stored in the memory to:
extract in real time threat data from received incident data on each of one or more current cyber-attacks from one or more security issue identification systems;
retrieve in real time classified data associated with one of a plurality of prior cyber-attacks based on the extracted threat data for each of the one or more current cyber-attacks from one or more security incident databases;
determine and provide in real time one of a plurality of risk priorities for each of the one or more current cyber-attacks based on a calculated risk rating value for each of the one or more current cyber-attacks.
9. The device as set forth in claim 8 wherein the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to:
identify one of a plurality of automated resolutions for each of the one or more current cyber-attacks based on the retrieved classified data; and
automatically execute the identified one of the plurality of automated resolutions for each of the one or more current cyber-attacks in an order based on the determined one of the plurality of risk priorities for each of one or more current cyber-attacks.
10. The device as set forth in claim 8 wherein the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to:
output the extracted threat data for any of the one or more current cyber-attacks which does not match the classified data associated with any of the plurality of prior cyber-attacks.
11. The device as set forth in claim 8 wherein the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to:
determine the calculated risk rating value for each of the one or more current cyber-attacks based on asset criticality and a probability of exploitation value for each asset associated with each of the one or more current cyber-attacks.

12. The device as set forth in claim 11 wherein the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to:
obtain stored asset profile information on each asset associated with each of the one or more current cyber-attacks;
determine the asset value of each asset associated with each of the one or more current cyber-attacks based on the stored asset profile information on each asset associated with each of the one or more current cyber-attacks;
obtain the probability of exploitation value of each asset associated with each of the one or more current cyber-attacks.
13. The device as set forth in claim 8 wherein the plurality of risk priorities comprises one of a high risk priority threshold, a medium risk priority threshold, or a low risk priority threshold
14. The device as set forth in claim 8 wherein the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to:
determine when one of the plurality of automated resolutions is not a match with one or more current cyber-attacks; and
output the one of the plurality of risk priorities and the retrieved classified data for each of the one or more current cyber-attacks determined not to have a match with one of the plurality of automated resolutions for generation of new resolution for the plurality of automated resolutions.
15. A non-transitory computer readable medium having stored thereon instructions for optimizing an automated determination in real-time of a risk rating and a resolution for a cyber-attack comprising executable code which when executed by a processor, causes the processor to perform steps comprising:
extracting in real time threat data from received incident data on each of one or more current cyber-attacks from one or more security issue identification systems;
retrieving in real time classified data associated with one of a plurality of prior cyber-attacks based on the extracted threat data for each of the one or more current cyber-attacks from one or more security incident databases;
determining and providing in real time one of a plurality of risk priorities for each of the one or more current cyber-attacks based on a calculated risk rating value for each of the one or more current cyber-attacks.
16. The medium as set forth in claim 15 further comprising:
identifying one of a plurality of automated resolutions for each of the one or more current cyber-attacks based on the retrieved classified data; and
automatically executing the identified one of the plurality of automated resolutions for each of the one or more current cyber-attacks in an order based on the determined one of the plurality of risk priorities for each of one or more current cyber-attacks.
17. The medium as set forth in claim 15 further comprising outputting the extracted threat data for any of the one or more current cyber-attacks which does not match the classified data associated with any of the plurality of prior cyber-attacks.
18. The medium as set forth in claim 15 further comprising determining the calculated risk rating value for each of the one or more current cyber-attacks based on asset criticality and a probability of exploitation value for each asset associated with each of the one or more current cyber-attacks.
19. The medium as set forth in claim 18 further comprising:
obtaining stored asset profile information on each asset associated with each of the one or more current cyber-attacks;
determining the asset value of each asset associated with each of the one or more current cyber-attacks based on the stored asset profile information on each asset associated with each of the one or more current cyber-attacks;
obtaining the probability of exploitation value of each asset associated with each of the one or more current cyber-attacks.
20. The medium as set forth in claim 15 wherein the plurality of risk priorities comprises one of a high risk priority threshold, a medium risk priority threshold, or a low risk priority threshold.
21. The medium as set forth in claim 15 further comprising:
determining when one of the plurality of automated resolutions is not a match with one or more current cyber-attacks; and
outputting the one of the plurality of risk priorities and the retrieved classified data for each of the one or more current cyber-attacks determined not to have a match with one of the plurality of automated resolutions for generation of new resolution for the plurality of automated resolutions.

Dated this 30th day of January, 2015
SHWETHA A CHIMALGI
OF K & S PARTNERS
AGENT FOR THE APPLICANTS ,TagSPECI:FIELD OF THE INVENTION
This technology generally relates to computer network security methods and devices and, more particularly, to methods that optimize an automated determination in real-time of a risk rating and a resolution for a cyber-attack and devices thereof.