Patent ID: 11930046
Assignee: XEROX CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 5:
6. The computer-implemented method of claim 1, wherein the computing, based on the second set of variables and the second set of tunable parameters, the exposure factor indicating the impact of exploiting the vulnerability on the utility of the associated component involves using the following formula:, ef
    ⁢
    
     (
     
      v
      ,
      h
      ,
      x
     
     )
    
   
   =
   
    
     
      0.1
      ·
      Impact
     
     ⁢
       
     
      (
      v
      )
     
    
    
     e
     
      c
      ·
      
       f
       ⁡
       (
       x
       )
      
     
    
   
  
  ;, wherein v denotes a vulnerability being exploited; h denotes a component in the computer system; Impact (v) denotes a first variable representing an impact score; denotes a second variable; ec·ƒ(x) denotes a factor contributing to the exposure factor; c denotes a tunable parameter to weight the contribution of the factor ec·ƒ(x) to the exposure factor; and ƒ(x) is a function of variable x; wherein a directed edge from a vulnerability subgraph node to a dependency subgraph node indicates the exposure factor; and wherein the impact of exploiting the vulnerability on the associated component results in a decrease in utility of the component in the computer system.