Back to results
US 10,853,883 B2Granted
Cybersecurity profile generated using a simulation engine
AssigneeQomplx LLC
InventorsJason Crabtree, Andrew Sellers, Raveem Ismail, Anant Borole, Bharat Amin
Life of this patent
Estimating the term…
Abstract
A system for generating a cybersecurity profile, wherein a time series data retrieval and storage server retrieves information from a prospective client, and information previously gathered, and stored, from a plurality of sources; a directed computational graph analysis module performs graph analysis on the data from the time series data retrieval and storage server; and an automated planning service module performs predictive simulation analysis on data received from the directed computational graph.
Claims10
A system for generating a cybersecurity profile for cyber insurance risk analysis, comprising:
- a network-connected server comprising a memory, a processor, and a non-volatile storage device;
- a web portal comprising a first plurality of programming instructions stored in the memory and operating on the processor which causes the network-connected server to:
- receive and store questionnaire information provided by a client, the questionnaire information comprising identification of an industry in which the client operates a business;
- request and receive authorization from the client to obtain a snapshot of a client computer;
- install and execute a software snapshot script on the client computer, the software snapshot script comprising a second plurality of programming instructions operating on the client computer which cause the client computer to:
- identify a network of computers to which the client computer is attached;
- determine a baseline network usage of the network of computers;
- identify publicly facing computers in the network of computers;
- identify software and services running on the network of computers;
- and
- store client network data on the non-volatile storage device, the client network data comprising the identified network of computers, the baseline network usage, the publicly facing computers, and the identified software and services;
- a high volume web crawler comprising a third plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:
- retrieve the identification of the industry and the client network data from the non-volatile storage device;
- search the Internet for current trends in exploits and cyberattack targets related to the industry and the client network data;
- and
- store search results from the Internet search in the non-volatile storage device;
- and
- a directed computational graph analysis module comprising a fourth plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:
- retrieve the identification of the industry, the client network data, and the search results from the non-volatile storage device;
- and
- construct a propensity to be attacked profile from the identification of the industry, the client network data, and the search results, the propensity to be attacked profile comprising a directed computational graph comprising nodes representing data transformations and edges representing messages between the nodes;
- an automated planning service module comprising a fifth plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:
- analyze the propensity to be attacked profile by performing one or more analyses on the directed computational graph to determine a likelihood of various cyberattack occurrences;
- and
- assign a threat profile based on the likelihood of various cyberattack occurrences.
22 more elements
A method for generating a cybersecurity profile, comprising the steps of:
- receiving and store questionnaire information from a client, the questionnaire information comprising identification of an industry in which the client operates a business;
- requesting and receiving authorization from the client to obtain a snapshot of a client computer;
- installing and executing a software snapshot script on the client computer, the software snapshot script comprising a second plurality of programming instructions operating on the client computer which cause the client computer to:
- identify a network of computers to which the client computer is attached;
- determine a baseline network usage of the network of computers;
- identify publicly facing computers in the network of computers;
- identify software and services running on the network of computers;
- and
- storing client network data on a non-volatile storage device, the client network data comprising the identified network of computers, the baseline network usage, the publicly facing computers, and the identified software and services;
- retrieving the client network data from storage;
- constructing a propensity to be attacked profile from the identification of the industry, the client network data, and the search results, the propensity to be attacked profile comprising a directed computational graph comprising nodes representing data transformations and edges representing messages between the nodes;
- analyzing the propensity to be attacked profile by performing one or more analyses on the directed computational graph to determine a likelihood of various incident occurrences;
- and
- assigning a threat profile based on the likelihood of various cyberattack occurrences.
11 more elements
Dependencies are inferred from the claim text.