Operational network risk mitigation system and method

A method for utilizing a risk score evaluation, comprising the steps of:

• (i) computing node sums for each node by summing the importance scores of vulnerable devices which belong to a respective node,
• (ii) computing edge sums for each edge by summing the vulnerability scores of the vulnerabilities on a respective edge,
• (iii) computing inward edge sum for each node by summing the edge sums of edges directed to a respective node,
• (iv) computing edge weights by normalizing the edge sum with an inward edge sum of a target node,
• (v) computing a node weights vector, wherein a weighted adjacency matrix is set in accordance with the values obtained in step (iv), and
• wherein an intrinsic value vector is set in accordance with the values obtained in step (i),
• (vi) computing device impact scores,
• (vii) computing the security risk scores for each separate vulnerability, wherein the calculated risk score evaluation is utilized as part of a network risk mitigation and followed by protective measures to be conducted upon the network,
• wherein an automated network segmentation is facilitated to mitigate relevant network vulnerabilities;
• wherein short execution times are enabled during the conduction of the network segmentation by detecting and removing cyclic edges from network attack graph thereby restricting the number of devices in the network and
• (viii) computing security metrics over the resulting network attack graph and evaluating and prioritizing the security gaps detected in the network for mitigation.