Holistic computer system cybersecurity evaluation and scoring
A system and method for holistic computer system cybersecurity evaluation and risk rating that takes into account the operation of the entire computer system environment comprising hardware, software, and the operating system. Not only are the hardware, software, and operating system evaluated separately for cybersecurity concerns, their interaction and operation as a whole are also evaluated and scored. The results of such analyses may be used, for example, by underwriters of cybersecurity insurance policies to determine policy terms and rates.
1. A system for holistic computer system cybersecurity evaluation and rating, comprising:
a first computing device comprising a memory and a processor;
a system analyzer comprising a first plurality of programming instructions stored in the memory of, and operating on the processor of, the first computing device, wherein the first plurality of programming instructions, when operating on the processor, cause the first computing device to:
receive a system definition comprising:
a software definition comprising executable binary code for an application;
a hardware definition comprising a specification for a second computing device; and
an operating system definition for the second computing device, the operating system definition comprising executable binary code for an operating system;
identify a software function defined by the software definition and compare the function to a database of software functions to establish a software cybersecurity score;
identify a hardware component defined by the hardware definition and compare the component to a database of components to establish a hardware cybersecurity score; and
identify an operating system function defined by the operating system definition and compare the function to a database of operating system functions to establish an operating system cybersecurity score;
a scoring engine comprising a second plurality of programming instructions stored in the memory of, and operating on the processor of, the first computing device, wherein the second plurality of programming instructions, when operating on the processor, cause the first computing device to:
generate a cybersecurity score for the second computing device based on a combination of the software cybersecurity score, the hardware cybersecurity score, and the operating system cybersecurity score; and
a hardware emulator comprising a third plurality of programming instructions stored in the memory of, and operating on the processor of, the first computing device, wherein the third plurality of programming instructions, when operating on the processor, cause the first computing device to:
emulate functioning of the second computing device on the first computing device by:
receiving and installing the operating system on the emulated second computing device;
receiving and installing the application on the emulated second computing device; and
executing the application on the emulated second computing device using the operating system;
extract a function of the application to use as the software function by analyzing the execution of the application on the emulated second computing device;
extract a function of the operating system to use as the operating system function by analyzing operation of the operating system on the emulated second computing device; and
analyze the functioning of the second computing device by executing an attack on the emulated second computing device associated with a known hardware exploit to:
determine whether the emulated second computing device is susceptible to the known hardware exploit; and
update the hardware cybersecurity score using the determination.
2. The system of claim 1 , wherein the software definition is accompanied by source code for the application and the software cybersecurity score further comprises an analysis of the coding complexity of the source code.
3. The system of claim 1 , wherein the cybersecurity score is adjusted to reflect a domain in which the computer system will be used.
4. The system of claim 1 , wherein the cybersecurity score is adjusted to reflect a use to which the computer system will be put.
5. The system of claim 1 , wherein the cybersecurity score is adjusted to reflect a criticality of the computer system to overall operations of a business or larger network of computers.
6. The system of claim 1 , wherein the cybersecurity score is adjusted to reflect a magnitude of losses that would occur if the system was compromised.
7. A method for holistic computer system cybersecurity evaluation and rating, comprising the steps of:
receiving a system definition comprising:
a software definition comprising executable binary code for an application;
a hardware definition comprising a specification for a second computing device; and
an operating system definition for the second computing device, the operating system definition comprising executable binary code for an operating system;
identifying a software function defined by the software definition and compare the function to a database of software functions to establish a software cybersecurity score;
identifying a hardware component defined by the hardware definition and compare the component to a database of components to establish a hardware cybersecurity score;
identifying an operating system function defined by the operating system definition and compare the function to a database of operating system functions to establish an operating system cybersecurity score; and
generating a cybersecurity score for the second computing device based on a combination of the software cybersecurity score, the hardware cybersecurity score, and the operating system cybersecurity score;
emulating functioning of the second computing device on a first computing device by:
receiving and installing the operating system on the emulated second computing device;
receiving and installing the application on the emulated second computing device; and
executing the application on the emulated second computing device using the operating system;
extracting a function of the application to use as the software function by analyzing the execution of the application on the emulated second computing device;
extracting a function of the operating system to use as the operating system function by analyzing the operation of the operating system on the emulated second computing device; and
analyzing the functioning of the second computing device by executing an attack on the emulated second computing device associated with a known hardware exploit to:
determine whether the emulated second computing device is susceptible to the exploit; and
update the hardware cybersecurity score using the determination.
8. The method of claim 7 , wherein the software definition is accompanied by source code for the application and the software cybersecurity score further comprises an analysis of the coding complexity of the source code.
9. The method of claim 7 , further comprising the step of adjusting the cybersecurity score to reflect a domain in which the computer system will be used.
10. The method of claim 7 , further comprising the step of adjusting the cybersecurity score to reflect a use to which the computer system will be put.
11. The method of claim 7 , further comprising the step of adjusting the cybersecurity score to reflect a criticality of the computer system to overall operations of a business or larger network of computers.
12. The method of claim 7 , further comprising the step of adjusting the cybersecurity to reflect a magnitude of losses that would occur if the system was compromised.
13. A method for holistic computer system cybersecurity rating, comprising the steps of:
generating a base cybersecurity score for a computing device by combining separate analyses of:
a software function of a software component comprising executable binary code for an application;
a hardware component comprising a specification for a second computing device; and
an operating system function of an operating system component of a computer system comprising executable binary code for an operating system;
emulating functioning of the second computing device on a first computing device by:
receiving and installing the operating system on the emulated second computing device;
receiving and installing the application on the emulated second computing device; and
executing the application on the emulated second computing device using the operating system;
extracting the software function by analyzing the execution of the application on the emulated second computing device;
extracting the operating system function by analyzing operation of the operating system on the emulated second computing device; and
analyzing the functioning of the second computing device by executing an attack on the emulated second computing device associated with a known hardware exploit to:
determine whether the emulated second computing device is susceptible to the exploit; and
update the hardware cybersecurity score using the determination;
adjusting the cybersecurity score to reflect a domain in which the computer system will be used;
adjusting the cybersecurity score to reflect a use to which the computer system will be put;
adjusting the cybersecurity score to reflect a criticality of the computer system to overall operations of a business or larger network of computers; and
adjusting the cybersecurity score to reflect a magnitude of losses that would occur if the system was compromised.