Patent ID: 8607351

Claim:
A method for generating a semantic model of a cyberspace attack, the method comprising: describing, by a processor unit, a set of actions associated with a control flow of a set of attack patterns using non-deterministic controls to form a control block, wherein each of the attack patterns in the set of attack patterns describes a category of cyberspace attacks and wherein each of the non-deterministic controls comprises logic steps executed in an order decided at run time; identifying, by the processor unit, a set of ontology references associated with the set of attack patterns, wherein the set of ontology references comprises a reference to an ontology and wherein the ontology represents knowledge with a set of concepts and relationships between concepts in the set of concepts; generating, by the processor unit, the semantic model of the cyberspace attack, wherein the semantic model of the cyberspace attack comprises the control block and the set of ontology references and wherein the semantic model of the cyberspace attack is represented with a semantic modeling language; and creating, by the processor unit, a set of temporal constraints associated with the set of actions in the control block, wherein each temporal constraint in the set of temporal constraints is selected from the group consisting of a set of minimum time durations and a set of maximum time durations.