Patent ID: 11907407
Assignee: ACCENTURE GLOBAL SOLUTIONS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC G  H  Y | IPC G  H

Claim 11:
12. A non-transitory computer-readable storage medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations for applying remediations for cyber security in enterprise networks, the operations comprising:
providing, by a security platform, graph data defining a graph that is representative of an enterprise network, the graph comprising nodes and edges between nodes, each node representing an asset within the enterprise network, and each edge representing at least a portion of one or more lateral paths between assets in the enterprise network, the graph data comprising a set of configurations, each configuration affecting at least one impact;
determining, by the security platform, multiple sets of fixes for respective configurations;
incorporating, by the security platform, fix data representative of the multiple sets of fixes into the graph;
defining, by the security platform, a set of fixes comprising one or more fixes from the multiple sets of fixes by executing an optimization problem for nullifying one or more impacts, wherein the optimization problem is executed using a greedy algorithm and a coverage matrix that defines, for each fix in the multiple sets of fixes, one or more impacts that the fix nullifies; and
scheduling, by the security platform, performance of each fix in the set of fixes.