Patent ID: 8904542

Claim:
A computer program product comprising a non-transitory computer usable medium including a computer readable program, wherein the computer readable program when executed on a computer causes the computer to: generate information representative of worm entities; associate, in response to information representative of a network and of the worm entities, between worm entities and potential worm sources to provide associated worm sources; wherein the association is triggered when a new worm profile is received, when a new worm profile is generated, and when a likelihood of occurrences of a potential worm exceeds a certain threshold; determine potential worm attacks that start from the associated worm sources, by applying a worm attack simulation to a model of the network that represents at least nodes, vulnerabilities and topology of the network, wherein the non-transitory computer usable medium is used for holding the model of the network and uses software entities for representing network components; and evaluate at least one potential worm attack security metric associated with the potential worm attacks.