Patent ID: 11907407
Assignee: ACCENTURE GLOBAL SOLUTIONS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC G  H  Y | IPC G  H

Claim 16:
17. A system, comprising:
one or more computers; and
a computer-readable storage device coupled to the one or more computers and having instructions stored thereon which, when executed by the one or more computers, cause the one or more computers to perform operations for applying remediations for cyber security in enterprise networks, the operations comprising:
providing, by a security platform, graph data defining a graph that is representative of an enterprise network, the graph comprising nodes and edges between nodes, the nodes comprising:
a set of configuration nodes each representing a condition of an asset of the enterprise network;
a set of rule nodes each representing an attack methodology; and
a set of impact nodes each representing an impact on the enterprise network,
wherein an edge between a configuration node and a rule node indicates that the condition represented by the configuration node enables the attack methodology represented by the rule node, and an edge between a rule node and an impact node indicates that the attack methodology represented by the rule node causes the impact;

identifying, by the security platform, one or more fixes for each of multiple respective conditions represented by configuration nodes of the graph;
incorporating, by the security platform, fix data representative of the identified one or more fixes into the graph, including linking each of the one or more fixes to the configuration node representing the respective condition;
defining, by the security platform and using the graph data, a set of fixes from the identified one or more fixes by executing an optimization problem for nullifying one or more impacts represented by impact nodes of the graph; and
scheduling, by the security platform, performance of each fix in the set of fixes.