Threat coverage score and recommendations
Embodiments of the disclosure are related to a method, apparatus, and system for generating scores for the security threat coverage in a client network based on collected network environment data, comprising: determining a client device list; creating a client-specific threat matrix based on the client device list and a general threat matrix; and determining one or more security threat coverage scores for the client network based on the client-specific threat matrix.
1. A method for generating security threat coverage scores in a client network based on collected network environment data, comprising:
determining a client device list;
creating a client-specific threat matrix based on the client device list and a general threat matrix; and
determining one or more security threat coverage scores for the client network based on the client-specific threat matrix, wherein the client device list comprises active security devices present the client network, the general threat matrix comprises known security device categories, each of which is associated with one of one or more network areas, and threats against which each of them protects, and the client-specific threat matrix comprises the active security devices of the client, each of which is associated with one of the one or more network areas, and threats against which each of them protects.
2. The method of claim 1 , wherein a security threat coverage score is determined based on a comparison between a number of threat types against which protection is available and a total number of known threat types.
3. The method of claim 1 , wherein the security threat coverage scores comprise a score for each of Perimeter, Endpoint, Core, and Cloud areas of the client network.
4. The method of claim 3 , wherein the security threat coverage scores further comprise an overall security threat coverage score, wherein the overall security threat coverage score is an average of the individual security threat coverage scores for all areas of the client network.
5. The method of claim 1 , further comprising generating one or more device recommendations, wherein a recommended device, if installed, improves at least one of the security threat coverage scores.
6. The method of claim 5 , wherein the device recommendations are associated with one of Perimeter, Endpoint, Core, and Cloud areas of the client network.
7. A non-transitory computer-readable medium comprising code which, when executed by a processor, causes the processor to execute a method for generating security threat coverage scores in a client network based on collected network environment data, comprising:
determining a client device list;
creating a client-specific threat matrix based on the client device list and a general threat matrix; and
determining one or more security threat coverage scores for the client network based on the client-specific threat matrix, wherein the client device list comprises active security devices present the client network, the general threat matrix comprises known security device categories, each of which is associated with one of one or more network areas, and threats against which each of them protects, and the client-specific threat matrix comprises the active security devices of the client, each of which is associated with one of the one or more network areas, and threats against which each of them protects.
8. The non-transitory computer-readable medium of claim 7 , wherein a security threat coverage score is determined based on a comparison between a number of threat types against which protection is available and a total number of known threat types.
9. The non-transitory computer-readable medium of claim 7 , wherein the security threat coverage scores comprise a score for each of Perimeter, Endpoint, Core, and Cloud areas of the client network.
10. The non-transitory computer-readable medium of claim 9 , wherein the security threat coverage scores further comprise an overall security threat coverage score, wherein the overall security threat coverage score is an average of the individual security threat coverage scores for all areas of the client network.
11. The non-transitory computer-readable medium of claim 7 , further comprising generating one or more device recommendations, wherein a recommended device, if installed, improves at least one of the security threat coverage scores.
12. The non-transitory computer-readable medium of claim 11 , wherein the device recommendations are associated with one of Perimeter, Endpoint, Core, and Cloud areas of the client network.