Systems and methods for determining an objective security assessment for a network of assets
AssigneeRapid7, Inc.
InventorsHD Moore, Roy Donald Hodgman, Dana Elizabeth Wolf, Matthew Robert Hathaway
Life of this patent
Estimating the term…
Abstract
A security assessment tool can determine computer assets in a network and provide an overall security score for the network. The overall security score can represent an objective measure of the security of the network that considers potential security threats to the computer assets, counter measures deployed in the network to address the potential security threats, and the effectiveness of the counter measures. Based on the overall security assessment, the security assessment tool can provide recommendations for improving the security of the network.
Claims41
A computer-implemented method for determining an objective security assessment for a network, the method comprising:
- determining potential security threats to computer assets in the network;
- determining an actual deployment of counter measures on the computer assets;
- determining, by a processor, an overall security score for the network based at least in part on the actual deployment of the counter measures, an effectiveness of the counter measures, and the potential security threats;
- and
- outputting the overall security score for the network.
A computer-implemented method for generating a security assessment model, the method comprising:
- determining potential security threats to computer assets in a network;
- determining potential counter measures to address the potential security threats;
- determining effectiveness metrics for the potential counter measures;
- determining, for each of the counter measures, a weighting factors based at least in part on the effectiveness metrics;
- generating, by a processor, an overall security scoring model for the potential security threats and the potential counter measures based at least in part on the weighting factors;
- and
- storing the overall security scoring model in a computer readable storage medium.
A system for determining an objective security assessment, the system comprising:
- a network interface to a network of computer assets;
- one or more memory device storing instructions;
- and
- one or more processors coupled to the network interface and the one or more memory devices, the one or more processors being configured to execute the instructions to perform a method comprising:
- determining potential security threats to the computer assets in the network;
- determining an actual deployment of counter measures on the computer assets;
- determining an overall security score for the network based at least in part on the actual deployment of the counter measures, an effectiveness of the counter measures, and the potential security threats;
- and
- outputting the overall security score for the network.
A computer readable storage medium comprising instructions for causing one or more processors to perform a method for determining an objective security assessment, the method comprising:
- determining potential security threats to computer assets in a network;
- determining an actual deployment of counter measures on the computer assets;
- determining an overall security score for the network based at least in part on the actual deployment of the counter measures, an effectiveness of the counter measures, and the potential security threats;
- and
- outputting the overall security score for the network.
Dependencies are inferred from the claim text.