Machine learning statistical methods estimating software system's security analysis assessment or audit effort, cost and processing decisions

A system comprising:

• a hardware processor;
• a data bus coupled to the processor;
• and
• a computer-usable medium embodying computer program code, the computer-usable medium being coupled to the data bus, the computer program code used for generating a security analysis effort, cost and process scope estimates within a security intelligence environment, the security intelligence environment comprising a plurality of data sources and a security intelligence platform, the security intelligence platform comprising a security analysis estimation module, the security analysis estimation module executing on a processor of a computer system and comprising instructions executable by the processor and configured for:
• analyzing a software system, the analyzing the software system utilizing information received from at least one of the plurality of data sources;
• identifying a complexity level of a security analysis, the complexity level of the security analysis comprising identification of an effort level for the security analysis, the complexity level of the security analysis comprising identification of an effort level for the security analysis, the identifying comprising performing a security analysis estimation operation, the security analysis estimation operation comprising a dynamic analysis performed via a dynamic analysis scanning subsystem and a static analysis performed via a static analysis tool;
• and,
• generating the security analysis effort estimate, the security analysis effort estimate comprising an estimate of an effort expenditure to perform a security analysis on the software system at the identified complexity level, the security analysis estimation module providing a quantitative machine learning based analytics driven determination, the quantitative machine learning based analytics driven determination providing an estimation of parameters and correlation of coefficients which can drive price and cost factors for the software security vulnerabilities identification operation.

A non-transitory, computer-readable storage medium embodying computer program code for generating a security analysis effort, cost and process scope estimates within a security intelligence environment, the security intelligence environment comprising a plurality of data sources and a security intelligence platform, the security intelligence platform comprising a security analysis estimation module, the security analysis estimation module executing on a hardware processor of a computer system, the computer program code comprising computer executable instructions configured for:

• analyzing a software system, the analyzing the software system utilizing information received from at least one of the plurality of data sources;
• identifying a complexity level of a security analysis, the complexity level of the security analysis comprising identification of an effort level for the security analysis, the complexity level of the security analysis comprising identification of an effort level for the security analysis, the identifying comprising performing a security analysis estimation operation, the security analysis estimation operation comprising a dynamic analysis performed via a dynamic analysis scanning subsystem and a static analysis performed via a static analysis tool;
• and,
• generating the security analysis effort estimate, the security analysis effort estimate comprising an estimate of an effort expenditure to perform a security analysis on the software system at the identified complexity level, the security analysis estimation module providing a quantitative machine learning based analytics driven determination, the quantitative machine learning based analytics driven determination providing an estimation of parameters and correlation of coefficients which can drive price and cost factors for the software security vulnerabilities identification operation.