Patent ID: 11930046
Assignee: XEROX CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 3:
4. The computer-implemented method of claim 1, further comprising:
determining, based on the likelihood of exploiting the respective vulnerability in the computer system, a probability value, wherein the probability value represents a label for an edge between two vulnerabilities in the vulnerability subgraph, and wherein the label indicates a relative probability with which the edge or attack path will be traversed in an attack or by an attacker while exploiting the next vulnerability in the multi-step attack;
wherein the vulnerability subgraph includes directed edges between pairs of vulnerability subgraph nodes,
wherein a first vulnerability subgraph node includes a set of directed edges to a corresponding subset of vulnerability subgraph nodes, and
wherein a respective directed edge from the first vulnerability subgraph node to a node in the subset of vulnerability subgraph nodes indicates a probability of exploiting the second vulnerability subgraph node.