Back to results
US 11,232,384 B1Granted
Methods and systems for determining cyber related projects to implement
AssigneeThe Boston Consulting Group, Inc.
InventorsErnesto Robles, Michael Coden, Russell Schaefer
Life of this patent
Estimating the term…
Abstract
Methods and systems for determining cyber security related projects to implement. Cyber security related projects used to protect entity assets can be identified. A return on investment for each cyber security related project can be determined. An optimization programming problem algorithm can be solved to remove project redundancies. Cyber security related projects to implement can be determined.
Claims18
A method, comprising:
- using a processor to receive instructions and data from a memory in order to perform processing associated with identifying cyber security related projects used to protect entity assets;
- using the processor to perform processing associated with determining a return on investment for each cyber security related project, wherein the return on investment comprises a probability of an entity asset being compromised and a cost of the cyber security related project, and wherein the return on investment is determined using expected loss reduction information and project cost information;
- using the processor to perform processing associated with solving an optimization programming problem algorithm, using an optimization engine comprising an evolutionary algorithm, to remove project redundancies to select a subset of cyber security related projects that maximize expected loss reduction from cyber security related threats, or designate cyber security related projects that will not be implemented, or both;
- and
- using the processor to determine a subset of cyber security related projects to implement from the cyber security related projects using determined project redundancies, wherein the subset of cyber security related projects achieves a greatest impact at a minimal cost or a pre-determined cost or both, the greatest impact comprising total expected loss and/or cyber maturity;
- wherein the optimization programming problem algorithm uses a full project portfolio redundancy matrix that calculates a weighted average redundancy of a candidate portfolio to identify a net expected loss reduction of a portfolio of candidate projects;
- and
- wherein expected loss comprises a probability of a successful attack and an impact of the successful attack;
- and
- displaying the subset of cyber security related projects.
7 more elements
A system, comprising:
- a processor configured for:
- determining a return on investment for each cyber security related project, wherein the return on investment comprises a probability of an entity asset being compromised and a cost of the cyber security related project, and wherein the return on investment is determined using expected loss reduction information and project cost information;
- solving an optimization programming problem algorithm, using an optimization engine comprising an evolutionary algorithm, to remove project redundancies to select a subset of cyber security related projects that maximize expected loss reduction from cyber security threats, or designate cyber security related projects that will not be implemented, or both;
- determining a subset of cyber security related projects to implement from the cyber security related projects using determined redundancies, wherein the subset of cyber security related projects achieves a greatest impact at a minimal cost or a pre-determined cost or both, the greatest impact comprising total expected loss and/or cyber maturity;
- wherein the optimization programming problem algorithm uses a full project portfolio redundancy matrix that calculates a weighted average redundancy of a candidate portfolio to identify a net expected loss reduction of a portfolio of candidate projects;
- and
- wherein expected loss comprises a probability of a successful attack and an impact of the successful attack;
- and
- displaying the subset of cyber security related projects.
6 more elements
Dependencies are inferred from the claim text.