Patent Document ID: 9264444
Application ID: 13899093
Patent Flag: 1

Claim One:
1. A computer-implemented method for determining an objective security assessment for a network, the method comprising: determining potential security threats to computer assets in the network; determining an actual deployment of counter measures on the computer assets, wherein determining an actual deployment of counter measures comprises: determining security information of the computer assets, determining, based at least in part on the security information, at least one of the counter measures deployed on the computer assets, and determining, based at least in part on the security information, an actual deployment of the at least one of the counter measures on the computer assets; determining, by a processor, an overall security score for the network based at least in part on the actual deployment of the counter measures, an effectiveness of the counter measures, and the potential security threats, wherein determining the overall security score, comprises: determining an actual effectiveness score for the at least one of the counter measures deployed on the computer assets based at least in part on the actual deployment of the at least one of the counter measures, determining a possible effectiveness score for the at least one of the counter measures, wherein the possible effectiveness score represents deployment of the at least one of the counter measures on each of the computer assets capable of implementing the at least one of the counter measure, and determining a security score for the at least one of the counter measures based at least in part on the actual effectiveness score and the possible effectiveness score, wherein the overall security score comprises the security score; and outputting the overall security score for the network.