# US 2018/0324210 A1 · Method and system for determining a readiness of a computer network of an organization to denial of service (dos) attacks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0324210 A1 - Document ID: US20180324210A1 - Status: Published application - Kind: A1 - Application number: 15/585,248 - Filed: 2017-05-03 - Published: 2018-11-08 - Earliest claimed: 2017-05-03 - Assignees: Red Button Ltd. - Applicants: Red Button Ltd. - Inventors: Ziv GADOT - Web page: https://patentgrep.com/patent/US20180324210A1 ## CPC - H04L 63/1458: {Denial of Service} - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method, a system, and a computer readable medium for determining a readiness of a computerized network against distributed denial of service (DDoS) attacks are provided herein. The system may include: an interface configured to obtain properties characterizing the computerized network; a knowledge base containing a plurality of rules taking into account DDoS risks and best practice related thereto; and a computer processor configured to: analyze the properties using the knowledge base to yield an analysis; and determine a readiness of the computerized network against DDoS attacks, based on the analysis. In some embodiments, the properties are obtained by analyzing a filled-in questionnaire relating to the computerized network under test. In other embodiments, these properties are automatically derived from databases containing data pertaining to the computerized network. ## Claims ### Claim 1 A method of determining a readiness of a computerized network against distributed denial of service (DDoS) attacks, the method comprising: obtaining properties characterizing said computerized network; analyzing said properties using a knowledge base containing a plurality of rules taking into account DDoS risks and best practice related thereto; and determining a readiness of said computerized network against DoS attacks, based on said analysis. ### Claim 2 (depends on 1) The method according to claim 1, wherein the obtaining of the properties comprises obtaining responses to a questionnaire including one or more questions related to said computerized network. ### Claim 3 (depends on 1) The method according to claim 1, wherein the obtaining of the properties comprises deriving said properties automatically from databased associated with said computerized network. ### Claim 4 (depends on 1) The method according to claim 1, wherein the readiness comprises score per attributes directed to predefined risks. ### Claim 5 (depends on 1) The method according to claim 1, wherein the knowledge base comprises an inferential engine. ### Claim 6 (depends on 1) The method according to claim 1, wherein the knowledge base maps types of attacks to types of potential risks. ### Claim 7 (depends on 1) The method according to claim 1, wherein the readiness is relative to a third party benchmark standard encompassing readiness of computerized networks against DDoS attacks. ### Claim 8 A system for determining a readiness of a computerized network against distributed denial of service (DDoS) attacks, the method comprising: an interface configured to obtain properties characterizing said computerized network; a knowledge base containing a plurality of rules taking into account DDoS risks and best practice related thereto; and a computer processor configured to: analyze said properties using said knowledge base to yield an analysis; and determine a readiness of said computerized network against DDoS attacks, based on said analysis. ### Claim 9 (depends on 8) The system according to claim 8, wherein the obtaining of the properties comprises obtaining responses to a questionnaire including one or more questions related to said computerized network. ### Claim 10 (depends on 8) The system according to claim 8, wherein the obtaining of the properties comprises deriving said properties automatically from databased associated with said computerized network. ### Claim 11 (depends on 9) The system according to claim 9, wherein the questionnaire is tailored per DDoS properties of said computerized network. ### Claim 12 (depends on 8) The system according to claim 8, wherein the readiness comprises score per attributes directed to predefined risks. ### Claim 13 (depends on 8) The system according to claim 8, wherein the knowledge base comprises an inferential engine. ### Claim 14 (depends on 8) The system according to claim 8, wherein the knowledge base maps types of attacks to types of potential risks. ### Claim 15 (depends on 8) The system according to claim 8, wherein the readiness is relative to a benchmark standard encompassing readiness of computerized networks against DDoS attacks. ### Claim 16 A non-transitory computer readable medium for determining a readiness of a computerized network against distributed denial of service (DDoS) attacks, the computer readable medium comprising a set of instructions that when executed cause at least one computer processor to: obtain properties characterizing said computerized network; analyze said properties using a knowledge base containing a plurality of rules taking into account DDoS risks and best practice related thereto; and determine a readiness of said computerized network against DDoS attacks, based on said analysis. ### Claim 17 (depends on 16) The non-transitory computer readable medium according to claim 16, wherein the obtaining of the properties comprises obtaining responses to a questionnaire including one or more questions related to said computerized network. ### Claim 18 (depends on 16) The non-transitory computer readable medium according to claim 16, wherein the obtaining of the properties comprises deriving said properties automatically from databased associated with said computerized network. ### Claim 19 (depends on 18) The non-transitory computer readable medium according to claim 18, wherein the questionnaire is tailored per DDoS properties of said computerized network.