Patent ID: 11876823
Assignee: JUNGLE DISK, L.L.C.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A system for detecting and quantifying relative system vulnerabilities, the system comprising:
a domain, the domain comprising a plurality of information processing systems under common business control, each information processing system including a processor and a memory, an operating system executing on the processor, wherein the information processing system is coupled to at least one storage, the at least one storage including a plurality of files, the plurality of files including at least one application, the application including a file comprising a set of processor-executable instructions, wherein the operating system causes the application file to be loaded and the processor-executable instructions executed by the processor, the application file providing at least one network-visible interface;
a plurality of monitoring probes associated with the plurality of information processing systems, wherein each information processing system is associated with at least one monitoring probe; each monitoring probe interacting with one of the operating system and the application-provided network-visible interface, wherein each monitoring probe records an event observation and an associated timestamp;
a first time series accumulator receiving the plurality of event observations and time stamps and correlating them according to their time of occurrence;
an evaluator, the evaluator including:
a frequency domain transformer operable to take set of time-correlated event observations and represent them as an event feature matrix, each correlated event type being represented by a first dimension in the matrix and the occurrence information being represented by a second dimension in the matrix;
a matrix correlator operable to align a set of feature matrices according to one or more shared dimensions;
a multidimensional mapping function associating a first set of input feature matrices output from the matrix correlator with an output feature matrix;

wherein the output feature matrix represents a relative probability of system disruption due to a vulnerability on one or more of the plurality of information processing systems.