Patent ID: 9210185
Filing Date: 2015-12-08
Classification: G06F,H04L

Abstract:
1. A non-transitory processor-readable medium storing code representing processor-executable instructions, the code comprising code to cause the processor to: obtain information of a data model graph having a plurality of nodes and a plurality of edges connecting the plurality of nodes, obtain a threat indicator having a characteristic of a categorized assessment of network security risk; define a factor matrix representing a set of joint threat and safety probabilities for the plurality of nodes based on the relationship for each edge from the plurality of edges, the factor matrix including a factor indicative of a correlation between a pair of nodes from the plurality of nodes; determine an influence path for the threat indicator in the data model graph based on the factor matrix; propagate the threat indicator along the influence path to assess influence of the threat indicator on each node in the influence path; calculate a first updated probabilistic network security measure for a first node on the influence path based at least in part on the characteristic of the threat indicator; calculate a second updated probabilistic network security measure for a second node on the influence path based at least in part on the first updated probabilistic network security measure and the factor matrix; dynamically update the data model graph with the first updated probabilistic network security measure and the second updated probabilistic network security measure; and send a signal to generate a user interface having a user interface widget representing the first updated probabilistic network security measure and the second updated probabilistic network security measure.