Patent · US Active

Attack path and graph creation based on user and system profiling

US11363052B2 · kind B2 · utility

3Cited by

1References

19Claims

0Family size

Assignee

Qualys, Inc. · US

Inventors

Mayuresh Vishwas Dani · Fremont, US
Ankur S. Tyagi · Foster City, US
Rishikesh Jayaram Bhide · Pune, IN

Key dates

Filing date	Jul 19, 2019
Grant date	Jun 14, 2022
Priority date	—
Expiry date	Mar 6, 2040

Classification

Technology area (CPC H)Electricity
CPC primaryH04L63/1433
WIPO fieldDigital communication
WIPO sectorElectrical engineering

Abstract

Methods and systems for generating an attack path based on user and system risk profiles are presented. The method comprises determining user information associated with a computing device; determining system exploitability information of the computing device; determining system criticality information of the computing device; determining a risk profile for the computing device based on the user information, the system exploitability information, and the system criticality information; and generating an attack path based on the risk profile. The attack path indicates a route through which an attacker accesses the computing device. The system exploitability information indicates one or more of: the vulnerability associated with the computing device, an exposure window associated with the computing device, and a protection window associated with the computing device. The system criticality information indicates one or more: assets associated with the computing device and services associated with the computing device.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.