Threat-specific security risk evaluation for networked systems
The presently disclosed technology provides a threat-specific network risk evaluation tailored to a client's security objectives. The present technology may include identifying a plurality of threats to a first component of a networked system and assigning a plurality of weighting values to the plurality of threats according to the client's security objectives. The present technology may include identifying a plurality of vulnerabilities of the first component and determining a set of relevant threats for the first vulnerability based on the nature of the vulnerability and the weighting values assigned to the plurality of threats. The set of relevant threats includes one or more of the plurality of threats. The present technology may include determining a set of relevant threats for each of the identified vulnerabilities of the first component and calculating a risk of the first component based on the sets of the relevant threats.
1. A method for providing network security risk evaluation, the method comprising:
(A) identifying, using at least one threat categorization model, a plurality of threats to a first component of a networked system;
(B) assigning a plurality of weighting values to the plurality of threats, wherein at least one of the assigned weighting values is equal to zero;
(C) identifying a plurality of vulnerabilities of the first component by accessing a database of vulnerabilities that stores vulnerability information;
(D) determining a relevant threat set for a first vulnerability of the plurality of vulnerabilities based on the first vulnerability and the plurality of weighting values assigned to the plurality of threats and including eliminating threats from the plurality of threats that are not related to the first vulnerability, wherein the relevant threat set comprises one or more of the plurality of threats, and wherein the threats having an assigned weighting value equal to zero are excluded from the relevant threat set;
(E) repeating step (D) for each of the plurality of vulnerabilities to determine a plurality of relevant threat sets; and
(F) calculating a component risk of the first component based on the plurality of relevant threat sets.
2. The method of claim 1 , wherein the networked system comprises a plurality of components and the method further comprises repeating steps (A)-(F) for each of the plurality of components.
3. The method of claim 2 , wherein the networked system comprises a subsystem, wherein the subsystem comprises two or more components from the plurality of components, and wherein the method further comprises calculating a subsystem risk of the subsystem based on the component risk of each component in the subsystem.
4. The method of claim 2 , wherein the method further comprises calculating a system risk of the networked system based on the component risk of each of the plurality of components.
5. The method of claim 2 , wherein the method further comprises selecting a path of successive components from the plurality of components and calculating a path risk of the path of successive components.
6. The method of claim 1 , wherein the first component comprises a plurality of subcomponents and the method comprises performing steps (A)-(F) to calculate a subcomponent risk of a first subcomponent of the first component.
7. The method of claim 1 , wherein the method comprises selecting a subset of threats from the plurality of relevant threat sets and calculating the component risk of the first component based on the subset of threats.
8. The method of claim 1 , wherein the first component has an overall impact value and an overall exploitability value, and wherein calculating the component risk of the first component comprises computing a product of: the overall impact value, the overall exploitability value, and a sum of the plurality of weights assigned to the plurality of threats in the plurality of relevant threat sets.
9. The method of claim 8 , wherein each of the plurality of vulnerabilities has an impact value and a failure to exploit value, and the overall impact value of the first component is a sum of the impact values of each of the plurality of vulnerabilities and the overall exploitability value of the first component is a sum of the failure to exploit values of each of the plurality of vulnerabilities.
10. A network security risk evaluation apparatus comprising:
a processor; and
a memory storing instructions which, when executed by the processor, cause the processor to:
(A) identify, using at least one threat categorization model, a plurality of threats to a first component of a networked system;
(B) assign a plurality of weighting values to the plurality of threats, wherein at least one of the assigned weighting values is equal to zero;
(C) identify a plurality of vulnerabilities of the first component by accessing a database of vulnerabilities that stores vulnerability information;
(D) determine a relevant threat set for a first vulnerability of the plurality of vulnerabilities based on the first vulnerability and the plurality of weighting values assigned to the plurality of threats and including eliminating threats from the plurality of threats that are not related to the first vulnerability, wherein the relevant threat set comprises one or more of the plurality of threats, and wherein the threats having an assigned weighting value equal to zero are excluded from the relevant threat set;
(E) repeat step (D) for each of the plurality of vulnerabilities to determine a plurality of relevant threat sets; and
(F) calculate a component risk of the first component based on the plurality of relevant threat sets.
11. The apparatus of claim 10 , wherein the networked system comprises a plurality of components and the memory stores instructions which, when executed by the processor, further cause the processor to repeat steps (A)-(F) for each of the plurality of components.
12. The apparatus of claim 11 , wherein the networked system comprises a subsystem, wherein the subsystem comprises two or more components from the plurality of components, and wherein the memory stores instructions which, when executed by the processor, further cause the processor to calculate a subsystem risk of the subsystem based on the component risk of each component in the subsystem.
13. The apparatus of claim 11 , wherein the memory stores instructions which, when executed by the processor, further cause the processor to calculate a network risk of the networked system based on the component risk of each of the plurality of components.
14. The apparatus of claim 11 , wherein the memory stores instructions which, when executed by the processor, further cause the processor to select a path of successive components from the plurality of components and calculate a path risk of the path of successive components.
15. The apparatus of claim 10 , wherein the memory stores instructions which, when executed by the processor, further cause the processor to select a subset of threats from the plurality of relevant threat sets and calculate the component risk of the first component based on the subset of threats.
16. The apparatus of claim 10 , wherein the first component has an overall impact value and an overall exploitability value, and wherein calculating the risk of the first component comprises computing a product of: the overall impact value, the overall exploitability value, and a sum of the plurality of weights assigned to the plurality of threats in the plurality of relevant threat sets.
17. The apparatus of claim 16 , wherein each of the plurality of vulnerabilities has an impact value and a failure to exploit value, and the overall impact value of the first component is a sum of the impact values of each of the plurality of vulnerabilities and the overall exploitability value of the first component is a sum of the failure to exploit values of each of the plurality of vulnerabilities.
18. A non-transitory, computer-readable medium storing instructions which, when performed by a processor, cause the processor to:
(A) identify, using at least one threat categorization model, a plurality of threats to a first component of a networked system;
(B) assign a plurality of weighting values to the plurality of threats, wherein at least one of the assigned weighting values is equal to zero;
(C) identify a plurality of vulnerabilities of the first component by accessing a database of vulnerabilities that stores vulnerability information;
(D) determine a relevant threat set for a first vulnerability of the plurality of vulnerabilities based on the first vulnerability and the plurality of weighting values assigned to the plurality of threats and including eliminating threats from the plurality of threats that are not related to the first vulnerability, wherein the relevant threat set comprises one or more of the plurality of threats, and wherein the threats having an assigned weighting value equal to zero are excluded from the relevant threat set;
(E) repeat step (D) for each of the plurality of vulnerabilities to determine a plurality of relevant threat sets; and
(F) calculate a component risk of the first component based on the plurality of relevant threat sets.