Security risk aggregation, analysis, and adaptive control

A system for transaction-based security risk aggregation and analysis, the system comprising a server computing device configured to:

• receive security risk data elements from a plurality of data sources, the security risk data elements corresponding to a transaction submitted by a remote computing device to the server computing device for execution;
• aggregate the security risk data elements into a weighted risk matrix;
• generate a risk score for the submitted transaction based upon the weighted risk matrix;
• determine an internal environment risk factor comprising analyzing a first set of other transactions submitted within a first enterprise computing system in which the server computing device is located to determine whether the first set of other transactions comprise one or more of abnormal communications from or to computing devices in the enterprise computing system or execution of unauthorized software within the first enterprise computing system;
• determine an external environment risk factor comprising analyzing a second set of other transactions submitted from a second enterprise computing system that is external to the first enterprise computing system to determine whether the second set of other transactions comprise one or more of cyber attacks against the second enterprise computing system, fraudulent transactions submitted to the second enterprise computing system, or data breaches experienced by the second enterprise computing system;
• adjust the risk score for the submitted transaction based upon the internal environment risk factor and the external environment risk factor;
• determine a disposition for the transaction based upon the adjusted risk score;
• store the security risk data elements, the internal environment factor, the external environment factor, and the adjusted risk score in a database;
• and
• use the stored security risk data elements, the internal environment factor, the external environment factor, and the adjusted risk score to determine a disposition for a future transaction.

A computer program product, tangibly embodied in a non-transitory computer readable storage device, for transaction-based security risk aggregation and analysis, the computer program product including instructions operable to cause a server computing device to:

• receive security risk data elements from a plurality of data sources, the security risk data elements corresponding to a transaction submitted by a remote computing device to the server computing device for execution;
• aggregate the security risk data elements into a weighted risk matrix;
• generate a risk score for the submitted transaction based upon the weighted risk matrix;
• determine an internal environment risk factor comprising analyzing a first set of other transactions submitted within a first enterprise computing system in which the server computing device is located to determine whether the first set of other transactions comprise one or more of abnormal communications from or to computing devices in the enterprise computing system or execution of unauthorized software within the first enterprise computing system;
• determine an external environment risk factor comprising analyzing a second set of other transactions submitted from a second enterprise computing system that is external to the first enterprise computing system to determine whether the second set of other transactions comprise one or more of cyber attacks against the second enterprise computing system, fraudulent transactions submitted to the second enterprise computing system, or data breaches experienced by the second enterprise computing system;
• adjust the risk score for the submitted transaction based upon the internal environment risk factor and the external environment risk factor;
• determine a disposition for the transaction based upon the adjusted risk score;
• store the security risk data elements, the internal environment factor, the external environment factor, and the adjusted risk score in a database;
• and
• use the stored security risk data elements, the internal environment factor, the external environment factor, and the adjusted risk score to determine a disposition for a future transaction.