Back to results
US 2021/0281598 A1Published application
Holistic computer system cybersecurity evaluation and scoring
AssigneeQomplx LLC
InventorsJason Crabtree, Andrew Sellers
Life of this patent
Estimating the term…
Abstract
A system and method for holistic computer system cybersecurity evaluation and risk rating that takes into account the operation of the entire computer system environment comprising hardware, software, and the operating system. Not only are the hardware, software, and operating system evaluated separately for cybersecurity concerns, their interaction and operation as a whole are also evaluated and scored. The results of such analyses may be used, for example, by underwriters of cybersecurity insurance policies to determine policy terms and rates.
Claims13
A system for holistic computer system cybersecurity evaluation and rating, comprising:
- a first computing device comprising a memory and a processor;
- a system analyzer comprising a first plurality of programming instructions stored in the memory of, and operating on the processor of, the first computing device, wherein the first plurality of programming instructions, when operating on the processor, cause the first computing device to:
- receive a system definition comprising:
- a software definition comprising executable binary code for an application;
- a hardware definition comprising a specification for a second computing device;
- and
- an operating system definition for the second computing device, the operating system definition comprising executable binary code for an operating system;
- identify a software function defined by the software definition and compare the function to a database of software functions to establish a software cybersecurity score;
- identify a hardware component defined by the hardware definition and compare the component to a database of components to establish a hardware cybersecurity score;
- and
- identify an operating system function defined by the operating system definition and compare the function to a database of operating system functions to establish an operating system cybersecurity score;
- a scoring engine comprising a second plurality of programming instructions stored in the memory of, and operating on the processor of, the first computing device, wherein the second plurality of programming instructions, when operating on the processor, cause the first computing device to:
- generate a cybersecurity score for the second computing device based on a combination of the software cybersecurity score, the hardware cybersecurity score, and the operating system cybersecurity score;
- and
- a hardware emulator comprising a third plurality of programming instructions stored in the memory of, and operating on the processor of, the first computing device, wherein the third plurality of programming instructions, when operating on the processor, cause the first computing device to:
- emulate functioning of the second computing device on the first computing device by:
- receiving and installing the operating system on the emulated second computing device;
- receiving and installing the application on the emulated second computing device;
- and
- executing the application on the emulated second computing device using the operating system;
- and
- analyze the functioning of the second computing device by executing an attack on the emulated second computing device associated with a known hardware exploit to:
- determine whether the emulated second computing device is susceptible to the known hardware exploit;
- and
- update the hardware cybersecurity score using the determination.
22 more elements
A method for holistic computer system cybersecurity evaluation and rating, comprising the steps of:
- receiving a system definition comprising:
- a software definition comprising executable binary code for an application;
- a hardware definition comprising a specification for a second computing device;
- and
- an operating system definition for the second computing device, the operating system definition comprising executable binary code for an operating system;
- identifying a software function defined by the software definition and compare the function to a database of software functions to establish a software cybersecurity score;
- identifying a hardware component defined by the hardware definition and compare the component to a database of components to establish a hardware cybersecurity score;
- identifying an operating system function defined by the operating system definition and compare the function to a database of operating system functions to establish an operating system cybersecurity score;
- and
- generating a cybersecurity score for the second computing device based on a combination of the software cybersecurity score, the hardware cybersecurity score, and the operating system cybersecurity score;
- emulating functioning of the second computing device on a first computing device by:
- receiving and installing the operating system on the emulated second computing device;
- receiving and installing the application on the emulated second computing device;
- and
- executing the application on the emulated second computing device using the operating system;
- and
- analyzing the functioning of the second computing device by executing an attack on the emulated second computing device associated with a known hardware exploit to:
- determine whether the emulated second computing device is susceptible to the exploit;
- and
- update the hardware cybersecurity score using the determination.
17 more elements
A method for holistic computer system cybersecurity rating, comprising the steps of:
- generating a cybersecurity score for a computing device by combining separate analyses of:
- a software function of a software component comprising executable binary code for an application;
- a hardware component comprising a specification for a second computing device;
- and
- an operating system function of an operating system component of a computer system comprising executable binary code for an operating system;
- emulating functioning of the second computing device on a first computing device by:
- receiving and installing the operating system on the emulated second computing device;
- receiving and installing the application on the emulated second computing device;
- and
- executing the application on the emulated second computing device using the operating system;
- analyzing the functioning of the second computing device by executing an attack on the emulated second computing device associated with a known hardware exploit to:
- determine whether the emulated second computing device is susceptible to the exploit;
- and
- update the hardware cybersecurity score using the determination;
- and
- adjusting the cybersecurity score to reflect a domain in which the computer system will be used;
- adjusting the cybersecurity score to reflect a use to which the computer system will be put;
- adjusting the cybersecurity score to reflect a criticality of the computer system to overall operations of a business or larger network of computers;
- and
- adjusting the cybersecurity score to reflect a magnitude of losses that would occur if the system was compromised.
17 more elements
Dependencies are inferred from the claim text.