Patent Document ID: 20150288712
Application ID: 14242897
Patent Flag: 0

Claim One:
1. An apparatus for implementation of a system for modeling and analysis of cybersecurity threats in a complex-system platform, the apparatus comprising a processor and a memory storing executable instructions that in response to execution by the processor cause the apparatus to implement at least: a data flow diagram creator configured to identify elements of an information system configured for implementation by a complex-system platform, the elements including components and data flows therebetween, the components including one or more of a host, process, data store or external entity, the data flow diagram creator also being configured to compose a data flow diagram for the information system, the data flow diagram including nodes representing the components and edges representing the data flows, and in metadata associated with the nodes and edges, provide structured information including attributes of the components and data flows; a threat indicator coupled to the data flow diagram creator and configured to identify a cybersecurity threat to a particular element of the elements of the information system, the threat indicator also being configured to add a secondary node representing the cybersecurity threat to the data flow diagram to thereby produce a threat-model data flow diagram for the information system, and in metadata associated with the secondary node, provide structured information including attributes of the cybersecurity threat; and a threat analyzer coupled to the threat indicator and configured to perform an analysis of the cybersecurity threat based on the threat-model data flow diagram and metadata associated with the nodes, edges and secondary node thereof.