Back to results
US 11,451,571 B2Granted
IoT device risk assessment and scoring
AssigneePalo Alto Networks, Inc.
InventorJun Du
Life of this patent
Estimating the term…
Abstract
Techniques for establishing a risk score for Internet of Things (IoT) device parameters and acting in response thereto are disclosed. An applicable system includes IoT devices coupled to a progressive risk assessment system and a progressive risk alert engine. In a specific implementation, the system uses baseline risk, threat vectors, and behavioral risk to generate and update progressive risk scores associated with IoT devices in an IoT network.
Claims20
A method, comprising:
- analyzing one or more data packets transmitted to or from an Internet of Things (IoT) device over a network to which the IoT device is connected to obtain event parameters;
- analyzing the event parameters to determine a context of the IoT device;
- determining behavior of the IoT device based on the event parameters and the context of the IoT device;
- obtaining a progressive risk score for the IoT device by correlating:
- (1) a behavioral risk score determined using risk parameters associated with an undesired behavior, (2) a baseline risk corresponding to an intrinsic risk associated with the IoT device, and (3) a threat vector risk corresponding to threat intelligence associated with the IoT device;
- and
- sending an alert via the network when it is determined that the progressive risk score exceeds a threshold.
4 more elements
A system, comprising:
- a processor configured to:
- analyze one or more data packets transmitted to or from an Internet of Things (IoT) device over a network to which the IoT device is connected to obtain event parameters;
- analyze the event parameters to determine a context of the IoT device;
- determine behavior of the IoT device based on the event parameters and the context of the IoT device;
- obtain a progressive risk score for the IoT device by correlating:
- (1) a behavioral risk score determined using risk parameters associated with an undesirable behavior, (2) a baseline risk corresponding to an intrinsic risk associated with the IoT device, and (3) a threat vector risk corresponding to threat intelligence associated with the IoT device;
- and
- send an alert via the network when it is determined that the progressive risk score exceeds a threshold;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
7 more elements
Dependencies are inferred from the claim text.