Method for Evaluating System Risk
AssigneeNorwich University Applied Research Institutes (NUARI)
InventorPeter R. Stephenson
Life of this patent
Estimating the term…
Abstract
A method for evaluating the vulnerability of a system having at least one portal is provided, wherein at least a portion of the method is implemented via a controller. The method includes examining the at least one portal to identify at least one accessible portal, performing a qualitative analysis responsive to the at least one accessible portal, generating a risk profile responsive to the performing a qualitative analysis and operating the controller to cause the controller to at least one of log the risk profile in a storage device, and display the risk profile via a display device.
Claims20
A method for evaluating vulnerability of a system having at least one portal, wherein at least a portion of the method is implemented via a controller, the method comprising:
- examining the at least one portal to identify at least one accessible portal;
- performing a qualitative analysis responsive to the at least one accessible portal;
- generating a risk profile responsive to the performing a qualitative analysis;
- and
- operating the controller to cause the controller to at least one of log the risk profile in a storage device, and display the risk profile via a display device.
An evaluation system for implementing a method for evaluating the vulnerability of a system having at least one portal, the evaluation system comprising:
- a controller, wherein the controller is configured to implement at least a portion of the method, wherein the method includes,
- examining the at least one portal to identify at least one accessible portal;
- analyzing the system to determine a probability that a threat to the system will result in an impact to the system responsive to the relationship given by:
- R=P(T·Vi),
- wherein R is risk, V is vulnerability, T is threat, P is probability and i is the impact on the system;
- generating a risk profile responsive to the analyzing the system;
- and
- operating the controller to cause the controller to at least one of log the risk profile in a storage device, and
- display the risk profile via a display device.
Dependencies are inferred from the claim text.