Automatically computing and improving a cybersecurity risk score
Automatically computing and managing a cybersecurity risk score. The cybersecurity risk score and cyber-physical graph for a network are retrieved and analyzed to identify potential improvements that can be made to network topography and device configurations, changes are applied automatically and an updated cyber-physical graph reflecting the applied changes is produced, and the updated cyber-physical graph is reassessed to determine the effect of the changes that were applied.
1. A computing system for automatically computing and improving a cybersecurity risk score, comprising:
one or more hardware processors configured for:
generating a cybersecurity profile for the network via external reconnaissance of the network;
determining a cybersecurity risk score for at least a portion of the network based on the cybersecurity profile and a cyber-physical graph of the network;
providing the cybersecurity risk score and the cyber-physical graph to a distributed computational graph;
analyzing the cyber-physical graph and the cybersecurity risk score on a periodic or event-oriented basis using computations coordinated by the distributed computational graph; and
when the cybersecurity risk score falls below a threshold:
identifying, based on results of the analysis, a change applicable to each of a plurality of target devices within the network;
transmitting instructions to the plurality of target devices to apply or simulate the identified change; and
updating the cyber-physical graph based on the applied or simulated change.
2. A computer-implemented method for automatically computing and improving a cybersecurity risk score, the computer-implemented comprising the steps of:
generating a cybersecurity profile for the network via external reconnaissance of the network;
determining a cybersecurity risk score for at least a portion of the network based on the cybersecurity profile and a cyber-physical graph of the network;
providing the cybersecurity risk score and the cyber-physical graph to a distributed computational graph;
analyzing the cyber-physical graph and the cybersecurity risk score on a periodic or event-oriented basis using computations coordinated by the distributed computational graph; and
when the cybersecurity risk score falls below a threshold:
identifying, based on results of the analysis, a change applicable to each of a plurality of target devices within the network;
transmitting instructions to the plurality of target devices to apply or simulate the identified change; and
updating the cyber-physical graph based on the applied or simulated change.
3. A system for automatically computing and improving a cybersecurity risk score, comprising one or more computers with executable instructions that, when executed, cause the system to:
generate a cybersecurity profile for the network via external reconnaissance of the network;
determine a cybersecurity risk score for at least a portion of the network based on the cybersecurity profile and a cyber-physical graph of the network;
provide the cybersecurity risk score and the cyber-physical graph to a distributed computational graph;
analyze the cyber-physical graph and the cybersecurity risk score on a periodic or event-oriented basis using computations coordinated by the distributed computational graph; and
when the cybersecurity risk score falls below a threshold:
identify, based on results of the analysis, a change applicable to each of a plurality of target devices within the network;
transmit instructions to the plurality of target devices to apply or simulate the identified change; and
update the cyber-physical graph based on the applied or simulated change.
4. Non-transitory, computer-readable storage media having computer-executable instructions embodied thereon that, when executed by one or more processors of a computing system for automatically computing and improving a cybersecurity risk score, cause the computing system to:
generate a cybersecurity profile for the network via external reconnaissance of the network;
determine a cybersecurity risk score for at least a portion of the network based on the cybersecurity profile and a cyber-physical graph of the network;
provide the cybersecurity risk score and the cyber-physical graph to a distributed computational graph;
analyze the cyber-physical graph and the cybersecurity risk score on a periodic or event-oriented basis using computations coordinated by the distributed computational graph; and
when the cybersecurity risk score falls below a threshold:
identify, based on results of the analysis, a change applicable to each of a plurality of target devices within the network;
transmit instructions to the plurality of target devices to apply or simulate the identified change; and
update the cyber-physical graph based on the applied or simulated change.