Risk score calculation
The risk score for a device is calculated as a weighted sum of individual detection scores, based on a predefined matrix. This sum is capped at a maximum score, ensuring it does not exceed a defined ceiling. If a device has multiple detections with varying severities, the ceiling is determined by the highest severity level among those detections.
If a detection is muted or resolved, its score is 0. Otherwise, the score is calculated using the following matrix:
Scoring Matrix
|
Severity |
Low Confidence |
Moderate Confidence |
High Confidence |
|---|---|---|---|
|
Low |
0.1 |
0.3 |
0.5 |
|
Moderate |
0.5 |
1 |
2.5 |
|
High |
1 |
2.5 |
5 |
Maximum Score Limits
To prevent extreme values, the score is capped based on severity:
|
Severity |
Max Points |
|---|---|
|
Low |
2.5 |
|
Moderate |
5 |
|
High |
10 |
This scoring system helps prioritize detections based on how confident and severe they are, while also allowing flexibility for high-severity cases.