Cybersecurity profile generated using a simulation engine
A system for generating a cybersecurity profile, wherein a time series data retrieval and storage server retrieves information from a prospective client, and information previously gathered, and stored, from a plurality of sources; a directed computational graph analysis module performs graph analysis on the data from the time series data retrieval and storage server; and an automated planning service module performs predictive simulation analysis on data received from the directed computational graph.
1. A system for generating a cybersecurity profile for cyber insurance risk analysis, comprising:
a network-connected server comprising a memory, a processor, and a non-volatile storage device;
a web portal comprising a first plurality of programming instructions stored in the memory and operating on the processor which causes the network-connected server to:
install and execute a software snapshot script on the client computer, the software snapshot script comprising a second plurality of programming instructions operating on the client computer which cause the client computer to:
identify a network of computers to which the client computer is attached;
determine a baseline network usage of the network of computers;
identify publicly facing computers in the network of computers;
identify software and services running on the network of computers; and
store client network data on the non-volatile storage device, the client network data comprising the identified network of computers, the baseline network usage, the publicly facing computers, and the identified software and services;
a high volume web crawler comprising a third plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:
retrieve the client network data from the non-volatile storage device; and
search the Internet for current trends in exploits and cyberattack targets related to the industry and the client network data;
a directed computational graph analysis module comprising a fourth plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:
retrieve the client network data and the search results from the non-volatile storage device; and
construct a propensity-to-be-attacked profile from the client network data and the search results, the propensity-to-be-attacked profile comprising a directed computational graph comprising nodes representing data transformations and edges representing messages between the nodes; and
an automated planning service module comprising a fifth plurality of programming instructions stored in the memory and operating on the processor which cause the network-connected server to:
analyze the propensity-to-be-attacked profile by performing one or more analyses on the directed computational graph to determine a likelihood of various cyberattack occurrences; and
assign a threat profile based on the likelihood of various cyberattack occurrences.
2. The system of claim 1 , wherein information provided by the client comprises systems configurations, system layout, and digital assets.
3. The system of claim 1 , wherein the directed computational graph further comprises data previously gathered and previously analyzed from other clients and stored in the non-volatile storage device.
4. The system of claim 1 , wherein the high volume web crawler continuously monitors the Internet for release and development of new cybersecurity threats.
5. The system of claim 1 , wherein the search results are used to protect a client's systems from new and unknown threats.
6. A method for generating a cybersecurity profile, comprising the steps of:
installing and executing a software snapshot script on a client computer, the software snapshot script comprising a plurality of programming instructions capable of operating on the client computer to cause the client computer to:
identify a network of computers to which the client computer is attached;
determine a baseline network usage of the network of computers;
identify publicly facing computers in the network of computers;
identify software and services running on the network of computers; and
store client network data on a non-volatile storage device, the client network data comprising the identified network of computers, the baseline network usage, the publicly facing computers, and the identified software and services;
constructing a propensity-to-be-attacked profile from the client network data and the search results, the propensity-to-be-attacked profile comprising a directed computational graph comprising nodes representing data transformations and edges representing messages between the nodes;
analyzing the propensity-to-be-attacked profile by performing one or more analyses on the directed computational graph to determine a likelihood of various incident occurrences; and
assigning a threat profile based on the likelihood of various cyberattack occurrences.
7. The method of claim 6 , wherein information provided by the client comprises systems configurations, system layout, and digital assets.
8. The method of claim 6 , wherein the directed computational graph further comprises data previously gathered and previously analyzed from other clients and stored in the non-volatile storage device.
9. The method of claim 6 , further comprising the step of using a high volume web crawler to continuously monitor the Internet for release and development of new cybersecurity threats.
10. The method of claim 6 , further comprising the step of using the search results to protect a client's systems from new and unknown threats.