Patent · US Active

Automated prioritization of process-aware cyber risk mitigation

US12284200B2 · kind B2 · utility

0Cited by
40References
18Claims
0Family size

Assignee

Inventors

Key dates

Filing dateFeb 18, 2022
Grant dateApr 22, 2025
Priority date
Expiry dateApr 18, 2043

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/1441
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Implementations are directed to receiving graph data representative of a process-aware AAG that is representative of potential lateral movement of adversaries within a computer network, receiving risk profile data representative of a risk profile of an enterprise with respect to two or more risk aspects, generating, by a process-aware risk assessment module, a risk assessment based on the process-aware AAG and the risk profile, and generating, by a mitigation simulator module, a mitigation list based on the process-aware AAG, the risk profile, and the risk assessment, the mitigation list comprising a prioritized list of two or more facts of the process-aware AAG. Other implementations of this aspect include corresponding systems, apparatus, and computer programs, configured to perform the actions of the methods, encoded on computer storage devices.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.