Dynamic risk management
AssigneeMicrosoft Technology Licensing, LLC
InventorPradeep Bahl
Life of this patent
Estimating the term…
Abstract
A dynamic risk management system for operating systems that provides monitoring, detection, assessment, and follow-up action to reduce the risk whenever it rises. The system enables an operating system to protect itself automatically in dynamic environments. The risk management system monitors a diverse set of attributes of the system which determines the security state of the system and is indicative of the risk the system is under. Based on a specification of risk levels for the various attributes and for their combinations, the risk management system determines whether one or more actions are required to alleviate the overall risk to the system.
Claims20
A method performed on a computing device, the method comprising:
- allowing, by the computing device according to a conditional access control list (“ACL”), access to a resource, where the allowed access according to the conditional ACL is conditioned on a current risk level not exceeding a threshold, where the current risk level is based on a plurality of risk scores, where each risk score corresponds to a different risk factor;
- and
- denying, by the computing device according to the conditional ACL, access to the resource, where the denied access according to the conditional ACL is conditioned on the current risk level exceeding the threshold.
A computing device comprising:
- at least one processor;
- memory that is coupled to the at least one processor and that includes computer-executable instructions that, based on execution by the at least one hardware processor, configures the computing device to perform actions comprising:
- allowing, by the computing device according to a conditional access control list (“ACL”), access to a resource, where the allowed access according to the conditional ACL is conditioned on a current risk level not exceeding a threshold, where the current risk level is based on a plurality of risk scores, where each risk score corresponds to a different risk factor;
- and
- denying, by the computing device according to the conditional ACL, access to the resource, where the denied access according to the conditional ACL is conditioned on the current risk level exceeding the threshold.
At least one computer storage medium that includes computer-executable instructions that, based on execution by a computing device, configure the computing device to perform actions comprising:
- allowing, by the computing device according to a conditional access control list (“ACL”), access to a resource, where the allowed access according to the conditional ACL is conditioned on a current risk level not exceeding a threshold, where the current risk level is based on a plurality of risk scores, where each risk score corresponds to a different risk factor;
- and
- denying, by the computing device according to the conditional ACL, access to the resource, where the denied access according to the conditional ACL is conditioned on the current risk level exceeding the threshold.
Dependencies are inferred from the claim text.