Methods and apparatus for developing cyber defense processes and a cadre of expertise
OwnerRobert Schmidt, Gregory J. Rattray +1inventors
InventorsRobert Schmidt, Gregory J. Rattray, Christopher J. Fogle
Life of this patent
Estimating the term…
Abstract
Methods and apparatus for developing cyber defense processes and a cadre of expertise are disclosed. The methods and apparatus improve the ability of an enterprise to defend against cyber attacks by (i) identifying risks and critical operations; (ii) determining the associated situational awareness and identifying threats by adversaries; (iii) organizing for defense from cyber attack; (iv) assessing the ability of the enterprise to respond; (v) improving the enterprise by learning from the assessment; and (vi) delivering improved cyber defense processes and cadre of expertise.
Claims9
A method of developing cyber defense processes and a cadre of expertise designed to defend an enterprise against evolving cyber threats, the method comprising:
- identifying a first critical operation of the enterprise, wherein the first critical operation depends on a plurality of cyber resources;
- generating first situational awareness information, the first situational awareness information including (i) information associated with a first cyber threat by a first adversary to the first critical operation of the enterprise and (ii) the plurality of cyber resources;
- selecting and educating a plurality of people based on the first critical operation and the first situational awareness information;
- generating a first cyber defense process based on the first critical operation and the first situational awareness information;
- using a first exercise to access a first ability of the enterprise to respond to the first cyber threat;
- supplying at least one of the plurality of people with additional information based on an outcome of the first exercise;
- modifying the first cyber defense process based on the outcome of the first exercise;
- identifying a second critical operation of the enterprise, wherein the second critical operation depends on the plurality of cyber resources;
- generating second situational awareness information, the second situational awareness information including (i) information associated with a second cyber threat by a second adversary to the second critical operation of the enterprise and (ii) the plurality of cyber resources;
- selecting and educating the plurality of people based on the second critical operation and the second situational awareness information;
- generating a second cyber defense process based on the second critical operation and the second situational awareness information;
- using a second exercise to access a second ability of the enterprise to respond to the second cyber threat;
- supplying at least one of the plurality of people with additional information based on an outcome of the second exercise;
- and
- modifying the second cyber defense process based on the outcome of the second exercise.
Dependencies are inferred from the claim text.