IP Library Granted Patent US 10,853,883
Granted Patent B2
US 10,853,883 · App. 15/678,089 · Granted Dec 1, 2020

Cybersecurity profile generated using a simulation engine

Inventors: Jason Crabtree (Vienna, VA); Andrew Sellers (Monument, CO); Raveem Ismail (Oxford, GB); Anant Borole (Dona Paula, IN); Bharat Amin (Farnham, GB)
Assignee: QOMPLX, INC.
G06Q40/08G06N5/022G06Q30/0202
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,853,883
App. No.
15/678,089
Granted
Dec 1, 2020
Kind
B2
Abstract

A system for generating a cybersecurity profile, wherein a time series data retrieval and storage server retrieves information from a prospective client, and information previously gathered, and stored, from a plurality of sources; a directed computational graph analysis module performs graph analysis on the data from the time series data retrieval and storage server; and an automated planning service module performs predictive simulation analysis on data received from the directed computational graph.

Claims (43)

1. A system for generating a cybersecurity profile for cyber insurance risk analysis, comprising:

a network-connected server comprising a memory, a processor, and a non-volatile storage device;

a web portal comprising a first plurality of programming instructions stored in the memory and operating on the processor which causes the network-connected server to:

receive and store questionnaire information provided by a client, the questionnaire information comprising identification of an industry in which the client operates a business;

request and receive authorization from the client to obtain a snapshot of a client computer;

install and execute a software snapshot script on the client computer, the software snapshot script comprising a second plurality of programming instructions operating on the client computer which cause the client computer to:

identify a network of computers to which the client computer is attached;

determine a baseline network usage of the network of computers;

identify publicly facing computers in the network of computers;

identify software and services running on the network of computers; and

store client network data on the non-volatile storage device, the client network data comprising the identified network of computers, the baseline network usage, the publicly facing computers, and the identified software and services;

a high volume web crawler comprising a third plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:

retrieve the identification of the industry and the client network data from the non-volatile storage device;

search the Internet for current trends in exploits and cyberattack targets related to the industry and the client network data; and

store search results from the Internet search in the non-volatile storage device; and

a directed computational graph analysis module comprising a fourth plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:

retrieve the identification of the industry, the client network data, and the search results from the non-volatile storage device; and

construct a propensity to be attacked profile from the identification of the industry, the client network data, and the search results, the propensity to be attacked profile comprising a directed computational graph comprising nodes representing data transformations and edges representing messages between the nodes;

an automated planning service module comprising a fifth plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:

analyze the propensity to be attacked profile by performing one or more analyses on the directed computational graph to determine a likelihood of various cyberattack occurrences; and

assign a threat profile based on the likelihood of various cyberattack occurrences.

2. The system of claim 1 , wherein questionnaire information provided by the client further comprises systems configurations, system layout, and digital assets.

3. The system of claim 1 , the directed computational graph further comprises data previously gathered and previously analyzed from other clients and stored in the non-volatile storage device.

4. The system of claim 1 , wherein the high volume web crawler continuously monitors the Internet for release and development of new cybersecurity threats.

5. The system of claim 1 , wherein the search results are used to protect a client's systems from new and unknown threats.

6. A method for generating a cybersecurity profile, comprising the steps of:

receiving and store questionnaire information from a client, the questionnaire information comprising identification of an industry in which the client operates a business;

requesting and receiving authorization from the client to obtain a snapshot of a client computer;

installing and executing a software snapshot script on the client computer, the software snapshot script comprising a second plurality of programming instructions operating on the client computer which cause the client computer to:

identify a network of computers to which the client computer is attached;

determine a baseline network usage of the network of computers;

identify publicly facing computers in the network of computers;

identify software and services running on the network of computers; and

storing client network data on a non-volatile storage device, the client network data comprising the identified network of computers, the baseline network usage, the publicly facing computers, and the identified software and services;

retrieving the client network data from storage;

constructing a propensity to be attacked profile from the identification of the industry, the client network data, and the search results, the propensity to be attacked profile comprising a directed computational graph comprising nodes representing data transformations and edges representing messages between the nodes;

analyzing the propensity to be attacked profile by performing one or more analyses on the directed computational graph to determine a likelihood of various incident occurrences;

and

assigning a threat profile based on the likelihood of various cyberattack occurrences.

7. The method of claim 6 , wherein questionnaire information provided by the client further comprises systems configurations, system layout, and digital assets.

8. The method of claim 6 , wherein the directed computational graph further comprises data previously gathered and previously analyzed from other clients and stored in the non-volatile storage device.

9. The method of claim 6 , further comprising the step of using a high volume web crawler to continuously monitor the Internet for release and development of new cybersecurity threats.

10. The method of claim 1 , further comprising the step of using the search results to protect a client's systems from new and unknown threats.

Assignments (7)
CHANGE OF ADDRESS Recorded Oct 1, 2024
From: QOMPLX LLC
To: QOMPLX LLC
Reel/Frame 069083/0279 →
CHANGE OF NAME Recorded Sep 27, 2023
From: QPX LLC
To: QOMPLX LLC
Reel/Frame 065036/0449 →
CORRECTIVE ASSIGNMENT TO CORRECT THE RECEIVING PARTY PREVIOUSLY RECORDED AT REEL: 064674 FRAME: 0408. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Sep 20, 2023
From: QOMPLX, INC.
To: QPX LLC
Reel/Frame 064966/0863 →
PATENT ASSIGNMENT AGREEMENT TO ASSET PURCHASE AGREEMENT Recorded Aug 23, 2023
From: QOMPLX, INC.
To: QPX, LLC.
Reel/Frame 064674/0407 →
CHANGE OF ADDRESS Recorded Oct 27, 2020
From: QOMPLX, INC.
To: QOMPLX, INC.
Reel/Frame 054298/0094 →
CHANGE OF NAME Recorded Mar 26, 2020
From: FRACTAL INDUSTRIES, INC.
To: QOMPLX, INC.
Reel/Frame 052240/0465 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 21, 2017
From: CRABTREE, JASON; SELLERS, ANDREW; ISMAIL, RAVEEM; BOROLE, ANANT; AMIN, BHARAT
To: FRACTAL INDUSTRIES, INC.
Reel/Frame 043343/0824 →