Incident response according to risk score

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• responsive to detecting an attack on a threatened component of a computing system, gather information about the threatened component, including at least a dependency list that specifies related components to the threatened component,
• wherein the instructions to gather the information include instructions to identify information about the threatened component and generate the dependency list by identifying the related components according to interactions with the threatened component, the interactions including at least shared memory, and execution dependencies;
• determine a risk score for the attack according to a risk level associated with the attack, a risk type of the threatened component, and combined risks associated with compromising the related components;
• and
• provide a report specifying information about the attack, including at least the risk score.

A method, comprising:

• responsive to detecting an attack on a threatened component of a computing system, gathering information about the threatened component, including at least a dependency list that specifies related components to the threatened component,
• wherein gathering the information includes identifying information about the threatened component and generating the dependency list by identifying the related components according to interactions with the threatened component, the interactions including at least shared memory, and execution dependencies;
• determining a risk score for the attack according to a risk level associated with the attack, a risk type of the threatened component, and combined risks associated with compromising the related components;
• and
• providing a report specifying information about the attack, including at least the risk score.