Systems and methods for model-based cyber vulnerability assesment

A method for cyber vulnerability assessment (CVA), comprising.

• collecting data at multiple levels from a target environment via one or more cyber vulnerability (C V) data collection modules, the multiple levels comprising a network level, a platform level, and a binary level, analyzing the collected data, via a correlation engine, to identify relationships between entities in the collected data across the multiple levels;
• deriving one or more blocks representative of the entities;
• creating one or more links between the one or more blocks based on the identified relationships;
• and constructing, via a model generator, a CV attack surface model comprising the one or more blocks connected via the one or more links.

A non-transitory machine-readable medium storing instructions that, when executed by a computer system, cause the computer system to perform operations comprising collecting data at multiple levels from a target environment via one or more cyber vulnerability (C V) data collection modules, the multiple levels comprising a network level, a platform level, and a binary level;

• analyzing the collected data, via a correlation engine, to identify relationships between entities in the collected data across the multiple levels;
• deriving one or more blocks representative of the entities;
• creating one or more links between the one or more blocks based on the identified relationships;
• and constructing, via a model generator, a CV attack surface model comprising the one or more blocks connected via the one or more links.