Abstract: An index of network data is received, the index including network infrastructure data, network connection topology data and network devices data, collected in real time. Data describing one or more cybersecurity threat sources is received. Data describing communications occurring with devices within the network is received. The data describing the one or more cybersecurity threat sources and the data describing the communications occurring with devices within the network are analyzed to identify data describing possible security threats. The data describing the possible security threats is correlated with the index of network data to identify security threats to devices within the network.

Abstract: Network route control plane data, advertised by one or more routers on a network, is received from a passive discovery module. The passive discovery module is configured to communicate with the routers using one or more routing protocols, but not to advertise route data. The received network route control plane data is compared to network element data stored in a network element database. If the received network route control plane data is not contained in the network element database, the received network route control plane data is stored in the network element database. If the received network route control plane data is contained in the network element data database, the received network route control plane data is compared to target asset data stored in a target asset database. If the received network route control plane data is not contained in the target asset database, the received network route control plane data is stored in the target asset database.