System for component-level threat assessment in a computing environment

A computer program product for component-level threat assessment in a computing environment, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to:

• capture state information associated with a computing environment, wherein the computing environment comprises components, wherein each component is associated with component-level information, wherein the component-level information comprises device characteristics, data usage telemetry, operational statistics, information associated with applications stored thereon, and historical threat vector assessment;
• determine correlation measures for the components based on at least the state information, wherein the correlation measures quantify a level of dependency between the components;
• determine threat vectors associated with the components;
• determine mitigation protocols to be implemented on the components in response to an incidence of the threat vectors on the components;
• determine a first sequence in which the mitigation protocols are to be implemented based on at least the correlation measures for the components;
• and
• implement the mitigation protocols on the components in the first sequence to reduce a propagation effect of the threat vectors across the computing environment.

A method for component-level threat assessment in a computing environment, the method comprising:

• capturing state information associated with a computing environment, wherein the computing environment comprises components, wherein each component is associated with component-level information, wherein the component-level information comprises device characteristics, data usage telemetry, operational statistics, information associated with applications stored thereon, and historical threat vector assessment;
• determining correlation measures for the components based on at least the state information, wherein the correlation measures quantify a level of dependency between the components;
• determining threat vectors associated with the components;
• determining mitigation protocols to be implemented on the components in response to an incidence of the threat vectors on the components;
• determining a first sequence in which the mitigation protocols are to be implemented based on at least the correlation measures for the components;
• and
• implementing the mitigation protocols on the components in the first sequence to reduce a propagation effect of the threat vectors across the computing environment.