Offline platform information technology cyber-physical risk mitigation
AssigneeKnowledge Based Systems, Inc.
InventorsRonald Fernandes, Andrew Stephenson, Richard J. Mayer
Life of this patent
Estimating the term…
Abstract
Systems and techniques for offline platform information technology cyber-physical risk mitigation are described herein. System configuration data may be obtained for a platform information technology (PIT) computing system. A system model may be generated for the PIT computing system using the system configuration data. An attack path and mitigation data set may be generated from vulnerability and mitigation data. A risk profile may be generated for the PIT computing system by evaluating the attack path and mitigation data set using the system model. A security mitigation action may be automatically triggered based on a vulnerability detected in the risk profile.
Claims20
A system for offline platform information technology (PIT) cyber-physical risk assessment and mitigation comprising:
- at least one processor;
- and
- memory comprising instruction that, when executed by the at least one processor, cause the at least one processor to perform operations to:
- obtain, through analyst input and ingest of various external data sources, system configuration data for a PIT computing system, wherein the PIT computing system comprises a self-contained mission-critical system of interconnected computing, memory, sensory, and effector elements;
- generate, without requiring access to the PIT computing system, a cyber-physical model for the PIT computing system using the system configuration data, wherein the cyber-physical model hierarchically and topologically models the PIT computing system down to individual hardware and software component levels;
- generate an attack path and mitigation data set from vulnerability data and mitigation data, wherein the attack path comprises a sequence of exploitable control and communication relationships between PIT computing system components that an attacker could traverse from an entry point to a target component within the PIT computing system;
- generate a risk profile for the PIT computing system by evaluating the attack path and mitigation data set using the cyber-physical model without requiring access to the PIT computing system;
- and
- automatically determine appropriate security mitigation actions based on a vulnerability detected in the risk profile.
At least one non-transitory machine-readable medium comprising instructions for offline platform information technology (PIT) cyber-physical risk assessment and mitigation that, when executed by at least one processor, cause the at least one processor to perform operations to:
- obtain, through analyst input and ingest of various external data sources, system configuration data for a PIT computing system, wherein the PIT computing system comprises a self-contained mission-critical system of interconnected computing, memory, sensory, and effector elements;
- generate, without requiring access to the PIT computing system, a cyber-physical model for the PIT computing system using the system configuration data, wherein the cyber-physical model hierarchically and topologically models the PIT computing system down to individual hardware and software component levels;
- generate an attack path and mitigation data set from vulnerability data and mitigation data, wherein the attack path comprises a sequence of exploitable control and communication relationships between PIT computing system components that an attacker could traverse from an entry point to a target component within the PIT computing system;
- generate a risk profile for the PIT computing system by evaluating the attack path and mitigation data set using the cyber-physical model without requiring access to the PIT computing system;
- and
- automatically determine appropriate security mitigation actions based on a vulnerability detected in the risk profile.
A method for offline platform information technology (PIT) cyber-physical risk assessment and mitigation comprising:
- obtaining, through analyst input and ingest of various external data sources, system configuration data for a PIT computing system, wherein the PIT computing system comprises a self-contained mission-critical system of interconnected computing, memory, sensory, and effector elements;
- generating, without requiring access to the PIT computing system, a cyber-physical model for the PIT computing system using the system configuration data, wherein the cyber-physical model hierarchically and topologically models the PIT computing system down to individual hardware and software component levels;
- generating an attack path and mitigation data set from vulnerability data and mitigation data, wherein the attack path comprises a sequence of exploitable control and communication relationships between PIT computing system components that an attacker could traverse from an entry point to a target component within the PIT computing system;
- generating a risk profile for the PIT computing system by evaluating the attack path and mitigation data set using the cyber-physical model without requiring access to the PIT computing system;
- and
- automatically determine appropriate security mitigation actions based on a vulnerability detected in the risk profile.
Dependencies are inferred from the claim text.