Patent ID: 11968225
Assignee: QUALYS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method comprising:
determining user information indicating one or more user attributes associated with a vulnerability of a computing device, wherein the one or more user attributes associated with the vulnerability of the computing device comprises data associated with:
a website or application,
a browser or application history,
a downloaded or executed file, and
a password, privilege, or configuration;

quantifying the user information indicating the one or more user attributes associated with the vulnerability of the computing device;
determining system exploitability information of the computing device, the system exploitability information indicating one or more of:
the vulnerability of the computing device, and
a security window associated with the computing device;

quantifying the system exploitability information of the computing device;
determining system criticality information of the computing device, the system criticality information indicating one or more of:
an asset associated with the computing device, and
a service associated with the computing device;

quantifying the system criticality information of the computing device;
determining a risk profile for the computing device based on the quantified user information, the quantified system exploitability information, and the quantified system criticality information; and
initiating generation of an attack path based on the risk profile, the attack path indicating a route through which an attacker accesses the computing device.