PATENT CLAIM ANALYSIS

Application Number: 15922856
Application Type: Utility
Filing Date: 2018-03
Publication Date: 2018-11
Patent Classification: ["726", "025000"]

Abstract:
Attack simulation systems include a computing device coupled with a database, the device displaying input interfaces configured to store a plurality of threat model components, threats, and compensating controls in the database, and associate each stored threat with at least one stored component and associate each stored control with at least one of the stored threats through the database. A diagram interface is configured to diagram a system, application, or process, the diagram including some of the stored components and controls, to define a first threat model, and is further configured to display attack paths of all stored threats associated with the diagrammed components which compromise a selected component. Attack simulation methods include defining threat models and displaying attack paths using system interfaces. Threat model chaining methods include adding a component group to a first threat model to include therein a second threat model associated with a predefined component group.

Claim (Index 12):
An attack simulation and threat mitigation system, comprising:\n a computing device communicatively coupled with a database, the computing device displaying, on a display of the computing device:\n one or more input interfaces configured to, in response to receiving one or more user inputs, store a plurality of user-defined threat model components in the database, store a plurality of threats in the database, associate each of the threats with at least one of the threat model components through the database, store a plurality of compensating controls in the database, and associate each compensating control with at least one of the threats through the database, and; \n a diagram interface configured to, in response to receiving one or more user inputs, diagram a computing system, the diagram including one or more of the threat model components and one or more of the compensating controls, to define a first threat model, the first threat model including all threats associated through the database with the diagrammed threat model components; \n wherein the diagram interface is configured to, in response to receiving a selection of one of the diagrammed threat model components of the first threat model, visually display attack paths of all threats associated with the diagrammed threat model components which compromise the selected threat model component, and; \n wherein the attack simulation and threat mitigation system improves security of an actual computing system, modeled by the diagrammed computing system, by allowing a user to assess effectiveness of mitigations of an actual threat of an actual component of the actual computing system without penetration testing of the actual computing system, the actual threat corresponding with one of the threats associated with the selected threat model component.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 90.0
- Lexical Diversity: 2.29577
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15888021', '11424122', '15086330', '14242897', '14288260']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2502137432171488
- 35 USC 102 Novelty (BERT): 0.5755244968805001
- Combined Prediction Score: 0.2827448185834839
- Mean Citation Score: 265.301388
- Max Citation Score: 453.47906
- Similarity Product: 433.0413567958081

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test