Computer-based systems configured for network characterization and management based on device criticality score and methods of use thereof
A method includes scanning a network having a first and second host, obtaining, via the scanning, a first and second type information of the first and second host, respectively, the first or second type information including a device category the first or second host belongs to, obtaining, via the scanning, a first and second scaling factor of the first and second host, respectively, calculating, a first criticality score of the first host based on the first type information and the first scaling factor, calculating a second criticality score of the second host based on the second type information and the second scaling factor, and facilitating to apply a security patch on the first host prior to the second host when the first criticality score is higher than the second criticality score.
1 . A computer-implemented method comprising:
obtaining, by a computing device, a first parameter of a first device, and a second parameter of a second device, the first or second parameter comprising a device category of the respective first or second device;
obtaining, by the computing device, a first scaling factor of the first device, and a second scaling factor of the second device, wherein the first scaling factor or the second scaling factor is a product of a first component-specific scaling function associated with a number of services running on a respective device out of the first device or the second device, a second component-specific scaling function associated with a functionality of the respective device, and a third component-specific scaling function associated with a use case of the respective device;
calculating, by the computing device, a first criticality score of the first device based at least on the first parameter and the first scaling factor;
calculating, by the computing device, a second criticality score of the second device based on the second parameter and the second scaling factor;
wherein calculating the first or the second criticality score comprises:
using, as a multiplication factor, a minimum value for the respective device category of the first or second device; and
facilitating, by the computing device, to apply a security patch on the first device prior to the second device when the first criticality score is higher than the second criticality score.
2 . The method of claim 1 , wherein the device category is selected from workstation, router, server, printer, camera or a combination thereof.
3 . The method of claim 1 , wherein the minimum value for the device category of the first or the second parameter is determined by a machine learning model.
4 . The method of claim 1 , wherein the first criticality score is a product of multiplying the first parameter and the first scaling factor, and the second criticality score is a product of multiplying the second parameter and the second scaling factor.
5 . The method of claim 1 , wherein the functionality of the first or second device is identified based on a network map.
6 . The method of claim 1 , wherein the functionality of the first or second device is inferred by network traffic and interactions.
7 . The method of claim 1 , wherein a use case of the first or second device is determined by a location of the respective device.
8 . The method of claim 1 , further comprising repeatedly scanning at a predetermined frequency, by the computing device, a computer network hosting the first and the second device to obtain the first and the second parameter for calculating the first and the second criticality score.
9 . A computer-implemented method comprising:
scanning, by a computing device, a network having at least a first and a second device;
obtaining, by the computing device via the scanning, a first parameter of the first device, and second parameter of the second device, the first or second parameter comprising a device category of the respective first or second device;
obtaining, by the computing device via the scanning, a first scaling factor of the first device, and a second scaling factor of the second device, wherein the first scaling factor or the second scaling factor is a product of a first component-specific scaling function associated with a number of services running on a respective device out of the first device or the second device, a second component-specific scaling function associated with a functionality of the respective device, and a third component-specific scaling function associated with a use case of the respective device;
calculating, by the computing device, a first criticality score of the first device by multiplying the first parameter and the first scaling factor;
calculating, by the computing device, a second criticality score of the second device by multiplying the second parameter and the second scaling factor;
wherein calculating the first or the second criticality score comprises:
using, as a multiplication factor, a minimum value for the respective device category of the first or second device; and
facilitating, by the computing device, to apply a security patch on the first device prior to the second device when the first criticality score is higher than the second criticality score.
10 . The method of claim 9 , wherein the device category is selected from workstation, router, server, printer, camera or a combination thereof.
11 . The method of claim 9 , wherein the minimum value for the device category of the first or second parameter is determined by a machine learning model.
12 . The method of claim 9 , wherein the functionality of the first or second device is identified based on a network map or inferred by network traffic and interactions.
13 . The method of claim 9 , wherein the use case of the first or second device is determined by a location of the first or second device.
14 . The method of claim 9 , wherein the network scanning and calculating the criticality scores are conducted repeatedly at a predetermined frequency.
15 . A system, comprising:
one or more processors; and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, cause the one or more processors to:
obtain a first parameter of a first device, and a second parameter of a second device, the first or second parameter comprising a device category of the respective first or second device;
obtain a first and a second scaling factor of the first and the second device, respectively, wherein the first scaling factor or the second scaling factor is a product of a first component-specific scaling function associated with a number of services running on a respective device out of the first device or the second device, a second component-specific scaling function associated with a functionality of the respective device, and a third component-specific scaling function associated with a use case of the respective device;
calculate a first criticality score of the first device based at least on the first parameter and the first scaling factor;
calculate a second criticality score of the second device based at least on the second parameter and the second scaling factor;
wherein calculating the first or the second criticality score comprises:
using, as a multiplication factor, a minimum value for the respective device category of the first or second device; and
facilitate to apply a security patch on the first device prior to the second device when the first criticality score is higher than the second criticality score.
16 . The system of claim 15 , wherein the device category is selected from workstation, router, server, printer, camera or a combination thereof.
17 . The system of claim 15 , wherein the minimum value for the device category of the first or second parameter is determined by a machine learning model.
18 . The system of claim 15 , wherein the functionality of the first or the second device is identified based on a network map or inferred by network traffic and interactions.