Patent SG-11201806723P-A (SG)
Title: Security system
Inventor: MAHIEU ADRIAN
IPC: H04L29/06
Filed: 2017-02-10
Abstract: UseCases Threat Intelligence 42 Vuln I Threat Mitigation Ordered / Categorised threat-based remed iation list 50 Fig. 2 Static Scanning Flaws 62-1 ) Dynamic Scanning Flaws 62-2, Manual Testing Flaws 62-3 Configuration Flaws 62-4 Multiple Vulnerability Sources 62 Security Requirements (SOX, PCI, HIPAA, etc. Controls 26 Business Assets 24 (12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property Organization International Bureau (10) International Publication Number (43) International Publication Date WO 2017/137778 Al 17 August 2017 (17.08.2017) WIPO I PCT (51) International Patent Classification: (74) Agent: COZENS, Paul Dennis; Mathys & Squire LLP, H04L 29/06 (2006.01) GO6F 21/57 (2013.01) The Shard, 32 London Bridge Street, London Greater Lon- (21) International Application Number: don SE1 9SG (GB). 111111111111110111011111111111010111110 011101111110111011111110111111111110111111 W O 20 17 / 13777 8 Al Designated States (unless otherwise indicated, for every kind of national protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). PCT/GB2017/050371 (81) (22) International Filing Date: 10 February 2017 (10.02.2017) (25) Filing Language: English (26) Publication Language: English (30) Priority Data: 1602412.7 10 February 2016 (10.02.2016) GB (71) Applicant (for all designated States except US): CORTEX INSIGHT LIMITED [GB/GB]; 20-2 Wenlock Road, London, Greater London Nl 7GU (GB). (84) (72) Inventors; and (71) Applicants US only): MAHIEU, Adrian [GB/GB]; c/o Cortex Insight Limited, 20-22 Wenlock Road, London, Greater London Nl 7GU (GB). KAPP, Stephen [GB/GB]; c/o Cortex Insight Limited, 20-22 Wenlock Road, London, Greater London Nl 7GU (GB). [Continued on next page] = (54) Title: SECURITY SYSTEM (57) : A computer security system, comprising: a first input, adapted to receive threat data representing security threats; a second input, adapted to receive vulnerability data representing security vulnerabilities; a processor adapted to: identify a specific vulnerability of a computer entity in dependence on the threat data and the vulnerability data; assign the specific vulnerability a risk rating in dependence on the vulnerability data and the threat data; and to generate output data comprising an identifier of the specific vulnerability and its risk rating. WO 2017/137778 Al MIDEDIM000101011101010M011110011111111111111101110110111111 Published: — with international search report (Art. 21(3))