Patent ID: 8312549
Filing Date: 2012-11-13
Classification: G01S,G06Q

Abstract:
1. A method for organizing, updating and maintaining a dynamic threat analysis model that provides a risk assessment of a given system comprising assets, said method comprising: providing a dynamic data structure that represents interrelations between model entities of the system, including assets of the system and associated assets values, threat scenarios, vulnerabilities of the system and countermeasures including implementation cost of each countermeasure, wherein each risk is caused by at least one threat scenario, multiple threat scenarios can cause single risk, and multiple risks can be caused by a single threat scenario, and wherein the dynamic data structure is implemented by many to many rational database including: providing a computerized interface for inserting and updating data of said dynamic model by enabling the following: applying updates and changes to said dynamic model by processing the following operations: wherein calculating an optimized risk reduction plan includes an automatic iterative process for testing various combinations of possible implemented countermeasures, wherein the iterative process includes changing the possible implemented countermeasures and analyzing their calculated priorities according to the inputted level of mitigation level of at least one mitigation set, wherein the priority calculations are function of system asset values, degrees of damage, threat probabilities and degrees of mitigation provided by the proposed countermeasures to the threats, wherein the iterative process is processed by software that calculates the mitigation results for the most promising combinations of countermeasures, wherein the operations of applying updates and calculating, are preformed by a computer device, and wherein the computerized interface and the dynamic data structure are installed on a computer device.