Back to results
US 10,944,778 B1Granted
Method and system for implementing risk based cyber security
AssigneeEMC IP Holding Company LLC
InventorsOron Golan, Assaf Natanzon, Amit Lieberman, Yuri Manusov, Raul Shnier
Life of this patent
Estimating the term…
Abstract
A method and system for implementing risk-based cyber security. Specifically, the disclosed method and system entail evaluating risk as a decision threshold for conducting cyber security assessments of system images within cloud computing environments. Further, the disclosed method and system pivot on intelligence pertaining to the latest cyber threats and/or vulnerabilities found worldwide.
Claims18
A method for measuring cyber security risk, comprising:
- selecting a set of application granularity images (AGIs);
- compiling an environment properties list (EPL) derived from the set of AGIs;
- obtaining relevant attack information (RAI) based on the EPL;
- computing an attack risk metric (ARM) using at least a portion of the RAI;
- making a determination that the ARM exceeds an attack risk threshold;
- based on the determination:
- restoring the set of AGIs within a restored image environment (RIE), wherein the RIE is an isolated cloud computing environment, wherein the set of restored AGIs execute on the isolated cloud computing environment, wherein the isolated cloud computing environment limits access to the RIE from one or more external sources or other RIEs except for an available one or more ports through which an authorized RIE manager monitors the RIE;
- administering a known cyber security attack to the set of AGIs restored within the RIE;
- and
- monitoring the set of AGIs administered with the known cyber security attack to compile a cyber attack assessment (CAA).
7 more elements
A system, comprising:
- a data repository;
- and
- a cyber security service (CSS) operatively connected to the data repository, and programmed to:
- select a set of application granularity images (AGIs) stored in the data repository;
- compile an environment properties list (EPL) derived from the set of AGIs;
- obtain relevant attack information (RAI) based on the EPL;
- compute an attack risk metric (ARM) using at least a portion of the RAI;
- make a determination that the ARM exceeds an attack risk threshold;
- based on the determination:
- restore the set of AGIs within a restored image environment (RIE), wherein the RIE is an isolated cloud computing environment, wherein the set of restored AGIs execute on the isolated cloud computing environment, wherein the isolated cloud computing environment is configured to limit access to the RIE from one or more external sources or other RIEs except for an available one or more ports through which an authorized RIE manager monitors the RIE;
- administer a known cyber security attack to the set of AGIs restored within the RIE;
- and
- monitor the set of AGIs administered with the known cyber security attack to compile a cyber attack assessment (CAA).
10 more elements
A non-transitory computer readable medium (CRM) comprising computer readable program code, which when executed by a computer processor, enables the computer processor to:
- select a set of application granularity images (AGIs);
- compile an environment properties list (EPL) derived from the set of AGIs;
- obtain relevant attack information (RAI) based on the EPL;
- compute an attack risk metric (ARM) using at least a portion of the RAI;
- make a determination that the ARM exceeds an attack risk threshold;
- based on the determination:
- restore the set of AGIs within a restored image environment (RIE), wherein the RIE is an isolated cloud computing environment, wherein the set of restored AGIs execute on the isolated cloud computing environment, wherein the isolated cloud computing environment limits access to the RIE from one or more external sources or other RIEs except for an available one or more ports through which an authorized RIE manager monitors the RIE;
- administer a known cyber security attack to the set of AGIs restored within the RIE;
- and
- monitor the set of AGIs administered with the known cyber security attack to compile a cyber attack assessment (CAA).
7 more elements
Dependencies are inferred from the claim text.