Processing

Please wait...

PATENTSCOPE will be unavailable a few hours for maintenance reason on Tuesday 27.07.2021 at 12:00 PM CEST
Settings

Settings

Goto Application

1. WO2020142245 - IDENTIFICATION, PREDICTION, AND ASSESSMENT OF CYBER SECURITY RISK

Publication Number WO/2020/142245
Publication Date 09.07.2020
International Application No. PCT/US2019/067651
International Filing Date 19.12.2019
IPC
G06F 11/00 2006.1
GPHYSICS
06COMPUTING; CALCULATING OR COUNTING
FELECTRIC DIGITAL DATA PROCESSING
11Error detection; Error correction; Monitoring
CPC
G06F 21/577
GPHYSICS
06COMPUTING; CALCULATING; COUNTING
FELECTRIC DIGITAL DATA PROCESSING
21Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
57Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
577Assessing vulnerabilities and evaluating computer system security
G06F 2221/034
GPHYSICS
06COMPUTING; CALCULATING; COUNTING
FELECTRIC DIGITAL DATA PROCESSING
2221Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
03Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
034Test or assess a computer or a system
G06N 20/00
GPHYSICS
06COMPUTING; CALCULATING; COUNTING
NCOMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
20Machine learning
G06N 5/02
GPHYSICS
06COMPUTING; CALCULATING; COUNTING
NCOMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
5Computer systems using knowledge-based models
02Knowledge representation
Applicants
  • ARCEO LABS INC. [US]/[US]
Inventors
  • HARIPRASAD, Vishaal
Agents
  • ISON, Anna, M.
Priority Data
16/236,95631.12.2018US
Publication Language English (EN)
Filing Language English (EN)
Designated States
Title
(EN) IDENTIFICATION, PREDICTION, AND ASSESSMENT OF CYBER SECURITY RISK
(FR) IDENTIFICATION, PRÉDICTION ET ÉVALUATION DU RISQUE DE CYBERSÉCURITÉ
Abstract
(EN)
A technique for assessing and quantifying a cyber security risk is provided that includes a cyber resilience platform for obtaining reliable data from a vast set of available metrics, standardizing the data, and extracting meaning from the data to inform cyber security decisions. The disclosed technique provides visibility of a dynamic cyberspace landscape by identifying key factors that impact types of cyber security risk. These key factors can be used to distinguish between users of different risk types for various cyber threats and to identify actions affecting loss probabilities associated with a cyber threat. Strengths and weaknesses in a customer's cyber security profile are identified, including configuration settings that impact the effectiveness of cyber security protection measures and a cyber security score indicative of the customer's risk exposure.
(FR)
L'invention concerne une technique d'évaluation et de quantification d'un risque de cybersécurité qui comprend une plateforme de cyberrésilience permettant d'obtenir des données fiables à partir d'un vaste ensemble de métriques disponibles, de standardiser les données, et d'extraire une signification des données pour informer des décisions de cybersécurité. La technique décrite offre une visibilité sur un environnement de cyberespace dynamique par identification de facteurs clés qui impactent des types de risques de cybersécurité. Ces facteurs clés peuvent être utilisés pour faire la distinction entre des utilisateurs de différents types de risques pour diverses cybermenaces et pour identifier des actions affectant des probabilités de perte associées à une cybermenace. Des forces et des faiblesses dans un profil de cybersécurité d'un client sont identifiées, y compris des paramètres de configuration qui impactent l'efficacité de mesures de protection de cybersécurité et un score de cybersécurité indicatif de l'exposition au risque du client.
Also published as
Latest bibliographic data on file with the International Bureau