Systems and methods for evaluating cyber assets
AssigneeRaytheon BBN Technologies Corp.
InventorsMichael Hassan Atighetchi, Stephane Yannick Blais, Katarzyna Lucja Olejnik
Life of this patent
Estimating the term…
Abstract
Techniques for evaluating cyber assets are disclosed. A system obtains, from data sources in an experimental environment, raw data generated in response to execution of a cyber asset. The system generates, from the raw data, at least one instance model corresponding to the data sources. The at least one instance model includes instances of concepts represented in a cyber impact ontology.
Claims20
A method of evaluating cyber assets, comprising:
- obtaining, from a plurality of data sources in an experimental environment, raw data generated in response to execution of a cyber asset;
- and
- generating, from the raw data, at least one instance model corresponding to the respective plurality of data sources, the at least one instance model comprising a plurality of instances of concepts represented in a cyber impact ontology.
A computer system comprising:
- an experimental environment comprising a plurality of data sources;
- a cyber asset configured to be executed by the computer system;
- a processor;
- and
- a memory configured to store instructions that when executed by the processor cause the processor to:
- obtain, from a plurality of data sources in the experimental environment, raw data generated in response to execution of the cyber asset;
- and
- generate, from the raw data, at least one instance model corresponding to the respective plurality of data sources, the at least one instance model comprising a plurality of instances of concepts represented in a cyber impact ontology.
One or more non-transitory computer-readable media storing sequences of instruction for evaluating cyber assets, the sequences of instruction including computer executable instructions that instruct at least one processor to:
- obtaining, from a plurality of data sources in an experimental environment, raw data generated in response to execution of a cyber asset;
- and
- generating, from the raw data, at least one instance model corresponding to the respective plurality of data sources, the at least one instance model comprising a plurality of instances of concepts represented in a cyber impact ontology.
Dependencies are inferred from the claim text.