Patent ID: 8495740

Claim:
A method for generating a policy to protect a computer system from intrusions, the method comprising the steps of: a computer determining vulnerabilities of the computer system based on a comparison to a plurality of known attacks; responsive to determining that the computer system is vulnerable to the plurality of known attacks, the computer generating a report comprising data detailing the computer systems vulnerabilities and identifying one or more components of the computer system that is vulnerable to the plurality of known attacks; the computer correlating the data in the report to at least one of a prioritized order of protecting different areas of the computer system from different attacks and a range of security events to generate a threat pattern; the computer determining if the computer system is vulnerable to an attack associated with the threat pattern; and responsive to determining that the computer system is vulnerable to the attack, the computer generating the policy comprising a protocol to block suspicious data packets to protect the computer system from the attack based on a predetermined level of security associated with the computer system.