Cyberspace security system
AssigneeUT-Battelle, LLC
InventorsRobert K. Abercrombie, Frederick Sheldon, Erik M. Ferragut
Life of this patent
Estimating the term…
Abstract
A system evaluates reliability, performance and/or safety by automatically assessing the targeted system's requirements. A cost metric quantifies the impact of failures as a function of failure cost per unit of time. The metrics or measurements may render real-time (or near real-time) outcomes by initiating active response against one or more high ranked threats. The system may support or may be executed in many domains including physical domains, cyber security domains, cyber-physical domains, infrastructure domains, etc. or any other domains that are subject to a threat or a loss.
Claims20
An econometrics-based control system comprising:
- a processor;
- a memory in communication with the processor, the memory configured to store processor implementable instructions, where the processor implementable instructions are programmed to:
- generate a stakes matrix through a Bayesian belief network that reflects the cost of having one or more system requirements fail for at least one stakeholder;
- generate a dependency matrix through the Bayesian belief network that link a status of at least one component with each of the one or more system requirements;
- generate an impact matrix to link a possible threat with each of the at least one component;
- determine a mean failure cost as a function of the stakes matrix, the dependency matrix, and the impact matrix;
- and
- analyze the mean failure cost to determine a control strategy;
- and
- a communication component in communication with the processor and the memory, the communication component configured to communicate the control strategy to a controller component operable within the control system, where the controller component implements the control strategy.
A method that implements an econometrics-based control process comprising:
- generating a stakes matrix through a Bayesian belief network to determine a stake that at least one stakeholder has in one or more system requirements;
- generating a dependency matrix through the Bayesian belief network to link a status of one or more component with each of the one or more system requirements;
- generating an impact matrix to link one possible threat with each of the at least one or more system components based on a ranking of a plurality of threats or a plurality of vulnerabilities;
- determining a mean failure cost as a function of the stakes matrix, the dependency matrix, and the impact matrix;
- determining a control strategy based on an analysis of a mean failure cost or a return on investment;
- and
- communicating the control strategy to an external component.
A device that implements an econometrics-based control system comprising:
- a processor;
- a memory in communication with the processor, the memory configured to store processor implementable instructions, where the processor implementable instructions are programmed to:
- correlate a plurality of system requirements with each of a plurality of system stakeholders;
- identify a stake relating to each of the plurality of system stakeholders and the correlated plurality of system requirements through a Bayesian belief network, where the stake is identified by each of the plurality of system stakeholders;
- determine a mean failure cost as a function of the identified stake and a failure probability;
- analyze the mean failure cost to determine a control strategy;
- and
- a communication component in communication with the processor and the memory, the communication component configured to communicate the control strategy to a component operable within the control system, where the component implements the control strategy.
A method of implementing an econometrics-based control system comprising:
- identifying a plurality of system requirements;
- identifying a plurality of system stakeholders;
- defining a stake related to the interest of each of the plurality of system stakeholders in one of the plurality of system requirements through a Bayesian belief network;
- correlating the plurality of system requirements with each of the plurality of system stakeholders;
- assigning a failure probability to each of the identified plurality of system requirements based on a ranking of possible threats or vulnerabilities;
- determining a mean failure cost as a function of the identified stake and the failure probability;
- analyzing the mean failure cost to determine a control strategy;
- and
- communicating the control strategy to a component operable within the control system.
Dependencies are inferred from the claim text.