Abstract: A computer-implemented method for discovering network attack paths is provided. The method includes a computer generating scoring system results based on analysis of vulnerabilities of nodes in a network configuration. The method also includes the computer applying Bayesian probability to the scoring system results and selected qualitative risk attributes wherein output accounts for dependencies between vulnerabilities of the nodes. The method also includes the computer applying a weighted-average algorithm to the output yielding at least one ranking of nodes in order of likelihood of targeting by an external attacker.

Abstract: A cyber-security monitoring (CSM) computer device for responding to cybersecurity threats is provided. The CSM computer device includes a processor in communication with a memory. The processor is configured to monitor a virtual network including plurality of virtual machines, detect a cybersecurity threat to a first virtual machine of the plurality of virtual machines, generate a second virtual machine based on the first virtual machine, adjust the second virtual machine based on the cybersecurity threat, disconnect the first virtual machine from the virtual network to prevent communication between the first virtual machine and the plurality of virtual machines included in the virtual network, and connect the second virtual machine to the virtual network.

Abstract: A cyber-security monitoring (CSM) computer device for responding to cybersecurity threats is provided. The CSM computer device includes a processor in communication with a memory. The processor is configured to monitor a virtual network including plurality of virtual machines, detect a cybersecurity threat to a first virtual machine of the plurality of virtual machines, generate a second virtual machine based on the first virtual machine, adjust the second virtual machine based on the cybersecurity threat, disconnect the first virtual machine from the virtual network to prevent communication between the first virtual machine and the plurality of virtual machines included in the virtual network, and connect the second virtual machine to the virtual network.

Abstract: Methods and systems for use in architecture-centric threat modeling are described. One example system includes a display device, a memory device for storing a plurality of attributes for each of a plurality of network objects, and a processor communicatively coupled to the memory device. The processor is programmed to receive a user selection of at least a first network object and a second network object from the plurality of network objects; create a network architecture including the first network object and the second network object; associate the stored plurality of attributes with the selected network objects in the network architecture; display, on the display device, a graphical representation of the created network architecture; receive, from the user, at least one dataflow attribute associated with at least one of the first and second network objects; and store the at least one dataflow attribute to said memory device as an attribute of at least one of the plurality of network objects.

Abstract: A computer-implemented method for discovering network attack paths is provided. The method includes a computer generating scoring system results based on analysis of vulnerabilities of nodes in a network configuration. The method also includes the computer applying Bayesian probability to the scoring system results and selected qualitative risk attributes wherein output accounts for dependencies between vulnerabilities of the nodes. The method also includes the computer applying a weighted-average algorithm to the output yielding at least one ranking of nodes in order of likelihood of targeting by an external attacker.

Abstract: A computer-implemented method for discovering network attack paths is provided. The method includes a computer generating scoring system results based on analysis of vulnerabilities of nodes in a network configuration. The method also includes the computer applying Bayesian probability to the scoring system results and selected qualitative risk attributes wherein output accounts for dependencies between vulnerabilities of the nodes. The method also includes the computer applying a weighted-average algorithm to the output yielding at least one ranking of nodes in order of likelihood of targeting by an external attacker.

Abstract: A computer-implemented method for discovering network attack paths is provided. The method includes a computer generating scoring system results based on analysis of vulnerabilities of nodes in a network configuration. The method also includes the computer applying Bayesian probability to the scoring system results and selected qualitative risk attributes wherein output accounts for dependencies between vulnerabilities of the nodes. The method also includes the computer applying a weighted-average algorithm to the output yielding at least one ranking of nodes in order of likelihood of targeting by an external attacker.