Method and system to estimate risk for a software application due to quantum threat

A system, comprising:

• a memory storing instructions;
• one or more Input/Output (I/O) interfaces;
• and
• one or more hardware processors coupled to the memory via the one or more communication interfaces, wherein the one or more hardware processors are configured by the instructions to:
• receive a plurality of records associated with an application and a plurality of quantum parameters, wherein the plurality of quantum parameters comprise a list of quantum vulnerable algorithms, a number of Qubits required to break a cryptographic algorithm used by the application and a current Qubit number;
• parse the plurality of records to obtain a plurality of parameters comprising application parameters, crypto parameters and platform parameters;
• determine value of Quantum Day based on the current Qubit number and the number of Qubits required to break the cryptographic algorithm used by the application;
• compute a severity score (s_score), an occurrence score (o_score) and a detection score (d_score) for each of the plurality of parameters based on the value of Quantum Day;
• determine a risk priority number associated with each of the plurality of parameters by multiplying respective severity score, occurrence score and detection score;
• and
• estimate an overall risk of the application by summing up the risk priority numbers associated with the plurality of parameters.

One or more non-transitory machine-readable information storage mediums comprising one or more instructions which when executed by one or more hardware processors cause:

• receiving a plurality of records associated with an application and a plurality of quantum parameters, wherein the plurality of quantum parameters comprise a list of quantum vulnerable algorithms, a number of Qubits required to break a cryptographic algorithm used by the application and a current Qubit number;
• parsing the plurality of records to obtain a plurality of parameters comprising application parameters, crypto parameters and platform parameters;
• determining value of Quantum Day based on the current Qubit number and the number of Qubits required to break the cryptographic algorithm used by the application;
• computing a severity score (s_score), an occurrence score (o_score) and a detection score (d_score) for each of the plurality of parameters based on the value of Quantum Day;
• determining a risk priority number associated with each of the plurality of parameters by multiplying respective severity score, occurrence score and detection score;
• and
• estimating an overall risk of the application by summing up the risk priority numbers associated with the plurality of parameters.