Patent ID: 7555778
Filing Date: 2009-06-30
Classification: H04L

Abstract:
1. A tangible computer-readable medium encoded with a computer program for minimum-cost network hardening comprising the steps of: a) inputting a multitude of exploits, each of said “multitude of exploits” including at least one precondition mapped to at least one postcondition, at least one of said “multitude of exploits” being an initial-condition exploit, at least one of said “multitude of exploits” being a goal exploit, said “at least one precondition” being a logical combination of multiple preconditions; b) generating a dependency graph, by: c) constructing a goal conditions expression using said “dependency graph” by starting with said “goal exploit,” for each of said “multitude of exploits” mapped on said “dependency graph,” recursively: d) using said “goal conditions expression,” determine at least one set of safe network configurations; and e) choosing at least one of said “at least one set of safe network configurations” using hardening costs as a criterion.