Systems and methods for vulnerability analysis of phishing attacks

Abstract

Various embodiments provide a systems and method to manage creation of pen-tests in conjunction with scoring on multiple vertices to establish a consistent measure of level of difficulty associated with the pen-test. The system may manage execution of the pen-test with a sample group selected from a test target to establish a baseline score that other users of the broader target can be expected to meet or can be graded against. According to various embodiments, tailored scoring (e.g., specific to an entity) yields a more accurate measure for evaluating vulnerability relative to conventional approaches. Users having high risk scores can be required to complete targeted training exercises and/or repeat pen-test evaluations until their scores improve. In some embodiments, user permissions, rights, and/or roles on their computer systems can be automatically adjusted to increase security. Any adjustments may be automatically reversed responsive to completing training and/or improving a risk score.

Dependencies are inferred from the claim text.