Distributed digital security system
摘要
說明書
At block 702, the priority comparer 612 can receive a set of reporting recommendations 610 produced by different selectors 602 of the bounding manager 128 for a piece of event data 122. Each reporting recommendation 610, or the selector 602 that produced the reporting recommendation 610, can be associated with a priority value 608.
At block 704, the priority comparer 612 can identify a non-neutral reporting recommendation 610 that is associated with the highest priority value 608 among the set of reporting recommendations 610. Because reporting criteria 604 of selectors 602 that made neutral reporting recommendations 610 can be satisfied regardless of whether the event data 122 is ultimately sent to the security network 106, the priority comparer 612 may disregard neutral reporting recommendations 610 at block 704 regardless of their priority values 608, and only consider priority values 608 of positive reporting recommendations 610 and negative reporting recommendations 610.
