Patent Document ID: 9800607
Application ID: 14976743
Patent Status: 1

Claim One:
1. A computerized system for determining the effectiveness of information security technologies, comprising: an information system having one or more deployed security technologies; a computer apparatus including a processor, a memory, and a network communication device; and an information security analysis module stored in the memory, executable by the processor, and configured to: determine a security score for each element of a security technology defense matrix, each element of the security technology defense matrix being associated with the one or more deployed security technologies of the information system, wherein a first dimension of the security technology defense matrix corresponds to a plurality of resource classes, and a second dimension of the security technology defense matrix corresponds to a plurality of security operational functions; determine a defense-in-depth score D resource for each resource class, wherein the defense-in-depth score D resource for each resource class is equal to 1−(1−E resource1 )×(1−E resource2 )×. .. ×(1−E resourcen ), wherein E resource corresponds to the security score for each element of the security technology defense matrix that is associated with a particular resource class and n is the total number of elements of the security technology defense matrix associated with the particular resource class; determine a defense-in-depth score D operation for each security operational function, wherein the defense-in-depth score D operation for each security operational function is equal to 1−(1−E operation1 )×(1−E operation2 )×. .. ×(1−E operationm ), wherein E operation corresponds to the security score for each element of the security technology defense matrix that is associated with a particular security operational function and m is the total number of elements of the security technology defense matrix associated with the particular security operational function; based on determining the defense-in-depth score D resource for each resource class and determining the defense-in-depth score D operation for each security operational function, determine an aggregate security score; provide the defense-in-depth score D resource for each resource class, the defense-in-depth score D operation for each security operational function, and the aggregate security score to a user computing device; receive half-life information for each element of the security technology defense matrix; and based on the half-life information, the determined defense-in-depth score D resource for each resource class, and the determined defense-in-depth score D operation for each security operational function, determine a projected future defense-in-depth score for each resource class and security operational function.