Patent ID: 9652813
Date: 2017-05-16
CPC Classifications: G06Q

Claim:
1. A method for risk analysis, comprising: analyzing, by a processor coupled to a memory, at least one of incident information and activity information; identifying, by the processor, behavioral patterns by the analyzing of the one of incident information and the activity information; producing, by the processor, observations of patterns and anomalies based on matches of the behavioral patterns to behavior specifications; correlating, by the processor, the observations to asset vulnerability data to determine whether and how the observations affect a plurality of assets; calculating, by the processor, a risk score for each of the plurality of assets based upon a threat component, a vulnerability component, and a consequence component; deriving, by the processor, a per-asset risk for each of the plurality of assets based upon the correlation of the observations to the asset vulnerability data and by applying each risk score to each per-asset risk based on a common asset of the plurality of assets; applying a distance filter to the calculation of each risk score to adjust that risk score based on a location of critical infrastructure with respect to the common asset; and propagating a vulnerability risk and a threat from the common asset represented in the asset vulnerability data to each remaining asset of the plurality of assets, wherein the propagating of the vulnerability risk and the threat from the common asset is performed on each remaining asset in accordance with a weighted contribution of the vulnerability risk and the threat to that remaining asset.