Compound threat detection for a computing system

A system, comprising:

• a processor programmed to initiate executable operations comprising:
• collecting at least one topology graph for a computing system;
• collecting an environment and application policy posture for at least one regulation relevant to the computing system;
• generating a plurality of penetration tests, the plurality of penetration tests determined based on the at least one topology graph for the computing system and the environment and application policy posture for the at least one regulation relevant to the computing system;
• responsive to generating the plurality of penetration tests, running the plurality of penetration tests against the computing system, the plurality of penetration tests determining a plurality of threat vectors and at least one threat linkage between at least two of the plurality of threat vectors;
• and
• responsive to running the plurality of penetration tests against the computing system, outputting the plurality of threat vectors and the at least one threat linkage between the at least two of the plurality of threat vectors.

A computer program product, comprising:

• one or more computer readable storage mediums having program code stored thereon, the program code stored on the one or more computer readable storage mediums collectively executable by a data processing system to initiate operations including:
• collecting at least one topology graph for a computing system;
• collecting an environment and application policy posture for at least one regulation relevant to the computing system;
• generating a plurality of penetration tests, the plurality of penetration tests determined based on the at least one topology graph for the computing system and the environment and application policy posture for the at least one regulation relevant to the computing system;
• responsive to generating the plurality of penetration tests, running the plurality of penetration tests against the computing system, the plurality of penetration tests determining a plurality of threat vectors and at least one threat linkage between at least two of the plurality of threat vectors;
• and
• responsive to running the plurality of penetration tests against the computing system, outputting the plurality of threat vectors and the at least one threat linkage between the at least two of the plurality of threat vectors.