Patent ID: 8495747
Filing Date: 2013-07-23
Classification: G06F,H04L

Abstract:
1. A computer-implemented method performed by a data processing apparatus, comprising: using at least one processor device to generate a risk metric for an asset and a threat, wherein the risk metric is an estimate of a risk that the threat will affect the asset; generating a remediation availability metric for the asset and the threat, wherein the remediation availability metric is based, at least in part, on whether a remediation for the threat is available and not applied to the asset, wherein the remediation reduces the risk that the threat will affect the asset when applied to the asset; and determining a remediation prioritization metric for the asset and the threat according to the risk metric and the remediation availability metric, wherein the remediation prioritization metric specifies a priority of applying the remediation to the asset; wherein generating the risk metric for the asset and the threat comprises: