Patent ID: 11954208
Assignee: BAE SYSTEMS INFORMATION AND ELECTRONIC SYSTEMS INTEGRATION INC.
Field: IT methods for management (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A system for security evaluation providing a quantitative methodology for calculating a relative risk of a system security architecture, the system comprising:
a Security Evaluation Framework;
said Security Evaluation Framework comprising a System Security Model;
said System Security Model configured to:
receive a Security Report for a system architecture;
receive a Vendor Component Errata Report for said system architecture;
receive security Design Guidance and expectations for said system architecture;
receive a Bill of Materials for said system architecture;
output a System Security View for said system architecture; and
produce a Security Score relative risk report for said security evaluation of said system security architecture whereby said relative risk of said system security architecture is determined;

wherein Data Elements of said Security Evaluation Framework comprise:
Common Elements; and
Security Engineering Specific Elements;
said Common Elements comprising:
Requirements;
fed by Use Cases;
Requirements comprising Sub-System Requirements;
said Requirements providing input to
a System Model, said System Model comprising a Sub-System Model; and
Material Lists;

said Security Engineering Specific Elements comprising:
a Hardware Model;
an Attack Model;
a Countermeasure Model;
a Vulnerability Matrix;
said Hardware Model, said Attack Model, and said Countermeasure Model providing input to said Vulnerability Matrix; and

a Security Score produced from said Vulnerability Matrix;
wherein said Sub-System Model and said Material Lists provide input to said Hardware Model.