User-defined countermeasures
AssigneeMcAfee, Inc.
InventorsPrasanna Ganapathi Basavapatna, Deepakeshwaran Kolingivadi, Sven Schrecker
Life of this patent
Estimating the term…
Abstract
A particular set of computing assets is identified on a particular computing system including a plurality of computing assets. A user definition is received of a particular countermeasure applied to the particular set of assets, the user definition of the countermeasure including identification of each asset in the particular set of assets and identification of at least one vulnerability or threat addressed by the particular countermeasure in a plurality of known vulnerabilities or threats. Based on the user definition, actual deployment of the particular countermeasure on the particular computing system is assumed in a risk assessment of at least a portion of the particular computing system.
Claims23
A method comprising:
- identifying a particular set of computing assets on a particular computing system including a plurality of computing assets;
- receiving a user definition of a particular countermeasure applied to the particular set of assets, the user definition of the countermeasure including identification of each asset in the particular set of assets and identification of at least one vulnerability addressed by the particular countermeasure in a plurality of known vulnerabilities;
- and
- assuming actual deployment of the particular countermeasure on the particular computing system in a risk assessment of at least a portion of the particular computing system.
Logic encoded in non-transitory media that includes code for execution and when executed by a processor is operable to perform operations comprising:
- identifying a plurality of computing assets on a particular computing system;
- receiving a user definition of a particular countermeasure applied to a particular set of computing assets in the plurality of computing assets, the user definition of the countermeasure including identification of each asset in the particular set of assets and identification of at least one threat addressed by the countermeasure in a plurality of known threats;
- and
- assuming actual deployment of the particular countermeasure on the particular computing system in a risk assessment of at least a portion of the particular computing system.
A system comprising:
- at least one processor device;
- at least one memory element;
- and
- a risk assessment engine, adapted when executed by the at least one processor device to:
- identify a particular set of computing assets on a particular computing system including a plurality of computing assets;
- receive a user definition of a particular countermeasure applied to the particular set of assets, the user definition of the countermeasure including identification of each asset in the particular set of assets and identification of at least one vulnerability addressed by the particular countermeasure in a plurality of known vulnerabilities;
- and
- assume actual deployment of the particular countermeasure on the particular computing system in a risk assessment of at least a portion of the particular computing system.
Dependencies are inferred from the claim text.