Threat and defense evasion modeling system and method
AssigneeNSS Labs, Inc.
InventorsFrancisco S. Artes, Stefan Frei
Life of this patent
Estimating the term…
Abstract
A system and method for modeling viable threats and for evading deployed defenses on a network are described. As a defensive tool used for threat modeling, the system and method allows those responsible for the safety of their critical infrastructure and intellectual property to have a clear view of all failures in the security countermeasure products they have deployed. As an offensive tool used for defense evasion modeling, the system and method can be used to quickly ascertain a viable attack vector, select exploitation code, and cross-reference those exploits that will bypass every layer of countermeasure technologies to commercially- and publicly-accessible crimeware and security testing tools.
Claims25
A method for modeling computer and network threats, comprising:
- receiving information about an entity that is to be protected from threats, the entity being one of an application and an operating system;
- receiving information about one or more security products for protecting the entity;
- and
- modeling each security product to identify one or more exploits that are not stopped by the security product.
An apparatus for modeling computer and network threats, comprising:
- a computer system having a processor and a memory;
- a threat modeling component executed by the processor;
- the processor configured to receive information about an entity that is to be protected from threats, the entity being one of an application and an operating system and to receive information about one or more security products for protecting the entity;
- and
- the processor configured to model each security product to identify one or more exploits that are not stopped by the security product.
Dependencies are inferred from the claim text.