Patent ID: 8307444
Filing Date: 2012-11-06
Classification: G06F,H04L

Abstract:
1. A method for a computer system including a display device, the method comprising: receiving, by the computer system, configuration data for at least one network device in a network; determining, by the computer system, a network topology for at least a portion of the network in response to the configuration data, wherein the network topology indicates a location of a first server and existence of a threat source remote from the first server location, and wherein the network topology comprises incomplete information about the first server location; determining, by the computer system, at least a first vulnerability to said threat source associated with the first server location, wherein the vulnerability includes a plurality of vulnerability attributes; and determining, by the computer system, a coverage factor score for the first server location correlating to the incomplete information, based on the network topology and the configuration data; determining, by the computer system, a first security exposure of the first server location with respect to the threat source by analyzing the configuration data to determine a reachability of the first server location from the threat source; and accounting for the incomplete information by determining, by the computer system, a first vulnerability certainty associated with the first server location with respect to the vulnerability by calculating a probability that the first vulnerability exists based on the coverage factor score for the first server location and the network topology; and outputting a visual representation of the first security exposure and the first vulnerability certainty on the display device.