US 12,695,776 B2Granted

Method of cyber security and system thereof

AssigneeElta Systems Ltd.

InventorsNoam Krakover, Camila Edry

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computerized cyber security system for generating a consolidated risk score of an entity, usable for analyzing the vulnerabilities of plurality of entities to cyber risks. The system is configured to determine a first set of IP addresses for scanning and then scan the first set of IP addresses, and for each IP address identify a risk and extract corresponding risk criticality score, and determining a misconfiguration score. The system is further configured to map a second set of IP addresses an entity of interest and provide IP address criticality weights associated with the second set of IP addresses. The system is further configured to provide an entity criticality weight associated with the entity of interest.

Claims19

Dependent claims

A computerized cyber security system for generating a consolidated risk score of an entity, usable for analysing the vulnerabilities of plurality of entities to cyber risks, the computerized cyber security system comprising a processor and memory circuitry (PMC) configured to:

determine a first set of IP addresses for scanning;
scan the first set of IP addresses, and for each IP address in the set, and perform, including:
(1) identify at least one risk and extract corresponding at least one risk criticality score, wherein each risk criticality score is informative of the vulnerability of network assets associated with the IP address to the risk;
(2) determining a misconfiguration score being informative of the vulnerability of network assets associated with the IP address to a misconfiguration;
map a second set of IP addresses, of said first set, to at least one entity of interest, wherein each one of said entities of interest is associated with a respective sub-set of IP addresses of said second set;
provide IP address criticality weights associated respectively with said second set of IP addresses, each IP address criticality weight being informative of the IP address's sensitivity to cyber threats relative to the sensitivity of other IP addresses to the cyber threats;
provide an entity criticality weight associated respectively with said at least one entity of interest;
the entity criticality weight being informative of the entity's sensitivity to cyber threats, and being distinct from the sensitivity to cyber threats of the IP addresses of the entity, relative to the sensitivity of other entities to cyber threats;
wherein said scanning is performed by at least two scan tools each configured to obtain a subset of said set of risks and wherein each scan tool is associated with a respective tool weight, being informative of the reliability of the tool in detecting risks,
for each entity of interest, determine an entity consolidated risk score based on at least (i) the risk criticality scores associated with the IP addresses of the entity of interest, (ii) the misconfiguration scores associated with the IP addresses of the entity of interest (iii) IP criticality weights associated with the IP addresses of the entity of interest, (iv) the entity criticality weight of the entity of interest, and (v) the corresponding tool weight of the tool that was used for the scanning,
thereby obtaining a plurality of entity consolidated risk scores associated with respective entities of interest.

8 more elements

A computerized cyber security method for generating a consolidated risk score of an entity, usable for analysing the vulnerabilities of plurality of entities to cyber risks, the computerized cyber security method comprising:

(a) determining a first set of IP addresses for scanning;
(b) scanning the first set of IP addresses, and for each IP address in the set, and perform, including:
(1) identify at least one risk, and extract corresponding at least one risk criticality score, wherein each risk criticality score is informative of the vulnerability of network assets associated with the IP address to the risk;
(2) determining a misconfiguration score being informative of the vulnerability of network assets associated with the IP address to a misconfiguration;
(c) mapping a second set of IP addresses, of said first set, to at least one entity of interest, wherein each one of said entities of interest is associated with a respective sub-set of IP addresses of said second set;
(d) providing IP address criticality weights associated respectively with said second set of IP addresses;
each IP address criticality weight being informative of the IP address's sensitivity to cyber threats relative to the sensitivity of other IP addresses to the cyber threats;
(e) providing an entity criticality weight associated respectively with said at least one entity of interest;
the entity criticality weight being informative of the entity's sensitivity to cyber threats, and being distinct from the sensitivity to cyber threats of the IP addresses of the entity, relative to the sensitivity of other entities to cyber threats;
wherein said scanning is performed by at least two scan tools each configured to obtain a subset of said set of risks and wherein each scan tool is associated with a respective tool weight, being informative of the reliability of the tool in detecting risks, and
for each entity of interest,
(f) determining an entity consolidated risk score based on at least (i) the risk criticality scores associated with the IP addresses of the entity of interest, (ii) the misconfiguration scores associated with the IP addresses of the entity of interest (iii) IP criticality weights associated with the IP addresses of the entity of interest, (iv) the entity criticality weight of the entity of interest, and (v) the corresponding tool weight of the tool that was used for the scanning,
thereby obtaining a plurality of entity consolidated risk scores associated with respective entities of interest.

10 more elements

A non-transitory program storage device readable by a computer, tangibly embodying computer readable instructions executable by the computer to perform a method of generating a consolidated risk score of an entity, usable for analysing the vulnerabilities of plurality of entities to cyber risks, the method comprising:

(a) determining a first set of IP addresses for scanning;
(b) scanning the first set of IP addresses, and for each IP address in the set, perform, including:
(1) identify at least one risk and extract corresponding at least one risk criticality score, wherein each risk criticality score is informative of the vulnerability of network assets associated with the IP address to the risk;
(2) determining a misconfiguration score being informative of the vulnerability of network assets associated with the IP address to a misconfiguration;
(c) mapping a second set of IP addresses, of said first set, to at least one entity of interest, wherein each one of said entities of interest is associated with a respective sub-set of IP addresses of said second set;
(d) providing IP address criticality weights associated respectively with said second set of IP addresses;
each IP address criticality weight being informative of the IP address's sensitivity to cyber threats relative to the sensitivity of other IP addresses to the cyber threats;
(e) providing an entity criticality weight associated respectively with said at least one entity of interest;
the entity criticality weight being informative of the entity's sensitivity to cyber threat, and being distinct from the sensitivity to cyber threats of the IP addresses of the entity, relative to the sensitivity of other entities to cyber threats;
wherein said scanning is performed by at least two scan tools each configured to obtain a subset of said set of risks and wherein each scan tool is associated with a respective tool weight, being informative of the reliability of the tool in detecting risks, and
for each entity of interest,
(f) determining an entity consolidated risk score based on at least (i) the risk criticality scores associated with the IP addresses of the entity of interest, (ii) the misconfiguration scores associated with the IP addresses of the entity of interest (iii) IP criticality weights associated with the IP addresses of the entity of interest, (iv) the entity criticality weight of the entity of interest, and (v) the corresponding tool weight of the tool that was used for the scanning,
thereby obtaining a plurality of entity consolidated risk scores associated with respective entities of interest.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/681,335Filed 27 Jun 2022
Priority: IL 28566016 Aug 2021
Published: US 2024/0340303 A110 Oct 2024
Granted: 28 Jul 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis
G06F 21/552
Detecting local intrusion or implementing counter-measures: involving long-term monitoring or reporting
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general

Family

US 2024/0340303 A1Pre-grant publication · published 10 Oct 2024
US 12,695,776 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key