Risk factors for an organization network
AssigneeProofpoint, Inc.
InventorsBar Maor, Hila Rachel Chen
Life of this patent
Estimating the term…
Abstract
A method for determining risks associated with an identity in an organization network, including scanning an active directory for a network including a plurality of identities, to extract a plurality of attributes of the identities and their corresponding values. analyzing the extracted attribute values for an identity in the network to identify one or more risks associated with that identity, which an attacker can exploit, assigning a score to each risk identified by said analyzing, and further assigning a score to the identity based on the scores of the one or more risks associated with the identity.
Claims20
A method for determining security risks in an organization network, comprising:
- scanning, according to a pre-defined schedule, a network configuration comprising a plurality of identities, to extract a plurality of attributes of the identities and their corresponding values;
- analyzing the extracted attribute values for an identity in the network to identify one or more risks associated with that identity, which an attacker can exploit;
- obtaining a score for each risk identified by said analyzing, from a list of pre-determined risk scores irrespective of the identity;
- and
- assigning a score to the identity based on the scores of the one or more risks associated with the identity.
A method for determining security risks in an organization network, comprising:
- scanning, according to a pre-defined schedule, a network configuration comprising a plurality of identities, to extract permissions of the identities;
- analyzing the extracted permissions for an identity in the network to identify one or more risks associated with that identity, which an attacker can exploit;
- obtaining a score for each risk identified by said analyzing, from a list of pre-determined risk scores irrespective of the identity;
- and
- assigning a score to the identity based on the scores of the one or more risks associated with the identity.
Dependencies are inferred from the claim text.