Abstract: A method that may include receiving network information indicative of (a) network elements that comprise edge network element, (b) connectivity between the network elements, and (c) connectivity of edge network elements to one or more other networks; and generating a visual representation of the network, the visual representation comprises multiple layers, each layer comprises one or more of the network elements of the network, wherein different layers are associated with different importance values; wherein the visual representation is associated with selection metadata for selecting which part out of multiple parts of the visual representation to display, wherein each part comprises at least a part of a single layer the multiple layers.
Abstract: A method, system and computer program product for evaluating an IDP entity, the method includes evaluating an effect of at least one IDP rule applied by the IDP entity on legitimate traffic, based upon a network model; evaluating an effect of at least one IDP rule applied by the IDP entity based upon a network model and an attack model; determining an effectiveness of the IDP entity in response to the evaluated effects.
Type:
Application
Filed:
August 6, 2012
Publication date:
January 31, 2013
Applicant:
SKYBOX SECURITY, INC.
Inventors:
Amnon Lotem, Gideon Cohen, Ilan Horn, Moshe Meiseles
Abstract: A method, system and computer program product for evaluating an IDP entity, the method includes evaluating an effect of at least one IDP rule applied by the IDP entity on legitimate traffic, based upon a network model; evaluating an effect of at least one IDP rule applied by the IDP entity based upon a network model and an attack model; determining an effectiveness of the IDP entity in response to the evaluated effects.
Type:
Grant
Filed:
May 26, 2006
Date of Patent:
August 7, 2012
Assignee:
Skybox Security, Inc.
Inventors:
Amnon Lotem, Gideon Cohen, Ilan Horn, Moshe Meiseles
Abstract: The present invention provides systems and methods for risk detection and analysis in a computer network. Computerized, automated systems and methods can be provided. Raw vulnerability information and network information can be utilized in determining actual vulnerability information associated with network nodes. Methods are provided in which computer networks are modeled, and the models utilized in performing attack simulations and determining risks associated with vulnerabilities. Risks can be evaluated and prioritized, and fix information can be provided.
Type:
Grant
Filed:
April 28, 2005
Date of Patent:
January 17, 2012
Assignee:
Skybox Security, Inc.
Inventors:
Gideon Cohen, Moshe Meiseles, Eran Reshef