Patent Document ID: 10216938
Application ID: 14958792
Patent Flag: 1

Claim One:
1. A system to perform computer security threat analysis, comprising: a processor, configured to execute computer executable instructions; a memory, communicatively coupled with the processor; a computer readable medium, communicatively coupled with the processor; a data storage structure, resident in the computer readable medium configured to store a plurality of attack surface instances, a plurality of attack vector data instances, each attack vector data instance configured to store an association to one or more attack surface instances, a plurality of threat model instances, and a plurality of associations between attack surface instances and threat model instances, wherein: an attack vector data instance represents a vulnerability in a defense of a computer network, an attack surface instance comprises a set of attack vector data instances for a respective portion of the computer network, a threat model instance comprises an array of attack surface instances, and information in at least one threat model instance of the plurality of threat model instances is cross-correlated with information in a different threat model instance of the plurality of threat model instances; and a software query component resident in the memory and communicatively coupled to the data storage structure, the software query component configured to return data based at least on an association between an attack surface instance and a threat model instance, wherein the computer executable instructions direct the system to perform a procedure to remediate the vulnerability associated with the at least one attack vector or the at least one attack surface, wherein the instructions to perform the procedure are in response to indicator data that indicates a likelihood of the at least one attack vector or the at least one attack surface occurring.