Risk modeling

An apparatus for modeling a risk of security breaches to a network, comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable storage mediums storing one or more sequences of instructions, which when executed, cause:
• one or more agents gathering, from multiple sources across the network, analysis data that identifies observed characteristics of one or more nodes of the network;
• generating, using the analysis data, a multi-layer risk model for the network that comprises a first model layer that models an inherent risk of security breaches to assets of the network based on the observed characteristics of the one or more nodes;
• generating, using the multi-layer model, a statistical likelihood of a risk of security breach for each node of the network;
• and
• providing, to a user, the statistical likelihood of the risk of security breach for at least one node of the network.

A method for modeling a risk of security breaches to a network, comprising:

• one or more agents gathering, from multiple sources across the network, analysis data that identifies observed characteristics of one or more nodes of the network, wherein said one or more agents are implemented in one or more of hardware and software;
• generating, using the analysis data, a multi-layer risk model for the network that comprises a first model layer that models an inherent risk of security breaches to assets of the network based on the observed characteristics of the one or more nodes;
• generating, using the multi-layer model, a statistical likelihood of a risk of security breach for each node of the network, wherein said analysis data and said statistical likelihood of a risk of security breach for each node of the network are generated using one or more entities that are implemented in one or more of hardware and software;
• and
• providing, to a user, the statistical likelihood of the risk of security breach for at least one node of the network, wherein said statistical likelihood of the risk is transmitted over a computer network or electronically displayed upon a physical display.