Systems and methods for real-time graph based compliance verification

A method for graph-based security modeling, the method comprising:

• storing, by one or more processors, in a graph structure, at least one primitive node representing a security control deployed in a network infrastructure of an entity, the at least one primitive node stored in association with a first canonical identifier corresponding with the security control;
• storing, by the one or more processors, in the graph structure, at least one decorator node representing a deployment parameter corresponding with the security control, the at least one decorator node stored in association with a second canonical identifier corresponding with the deployment parameter and linked to the at least one primitive node by an edge indicating the deployment parameter is applied to the security control in the network infrastructure;
• associating, by the one or more processors, the at least one primitive node and the at least one decorator node with (i) at least one cryptographic proof recorded on a distributed ledger or blockchain storage and (ii) temporal metadata representing a time of verification of the security control or the deployment parameter;
• responsive at least in part to a request for a status of the security control or the deployment parameter, executing, by the one or more processors, a graph query against the graph structure, the graph query comprising at least one of the first canonical identifier or the second canonical identifier;
• accessing, by the one or more processors, based at least in part on execution of the graph query, the temporal metadata representing the time of verification and the at least one cryptographic proof from the distributed ledger or blockchain storage;
• and
• generating, by the one or more processors, a structured output corresponding to the request, the structured output indicating the status of the security control or the deployment parameter and an association to the at least one cryptographic proof.

A non-transitory computer readable storage medium (CRM) including one or more instructions stored thereon, the one or more instructions executable by one or more processing circuits to:

• store, in a graph structure, at least one primitive node representing a security control deployed in a network infrastructure of an entity, the at least one primitive node stored in association with a first canonical identifier corresponding with the security control;
• store, in the graph structure, at least one decorator node representing a deployment parameter corresponding with the security control, the at least one decorator node stored in association with a second canonical identifier corresponding with the deployment parameter and linked to the at least one primitive node by an edge indicating the deployment parameter is applied to the security control in the network infrastructure;
• associate the at least one primitive node and the at least one decorator node with (i) at least one cryptographic proof recorded on a distributed ledger or blockchain storage and (ii) temporal metadata representing a time of verification of the security control or the deployment parameter;
• responsive at least in part to a request for a status of the security control or the deployment parameter, execute a graph query against the graph structure, the graph query comprising at least one of the first canonical identifier or the second canonical identifier;
• access, based at least in part on execution of the graph query, the temporal metadata representing the time of verification and the at least one cryptographic proof from the distributed ledger or blockchain storage;
• and
• generate a structured output corresponding to the request, the structured output indicating the status of the security control or the deployment parameter and an association to the at least one cryptographic proof.