Abstract: A system for cyber-attack emulation includes a memory and one or more processors. The memory is configured to store a library of attack-code templates, each attack-code template including configurable program code that carries out a respective type of cyber-attack. The one or more processors are configured to specify an attack-emulation campaign based on one or more of the attack-code templates, and, for at least a given attack-code template included in the attack-emulation campaign, to perform an iterative process including (i) generating an emulated attack from the given attack-code template, (ii) applying the emulated attack to a component of a target computer system, (iii) evaluating an interim outcome of the emulated attack, and (iv) adapting the emulated attack depending on the interim outcome.

Abstract: A method of determining whether a program corresponds to a new version of an application is disclosed. A key value corresponding to the program is determined. A program descriptor corresponding to the program is determined. The program descriptor comprises fields extracted from a program file associated with the program. One or more versions of an application having the same key value are identified. A program descriptor corresponding to each of the one or more versions of the application is identified. The program descriptor corresponding to each of the one or more versions of the application comprises fields extracted from a program file associated with the version of the application. The determination of whether the program corresponds to a new version of the identified application is based on comparing the program descriptor corresponding to the program against the program descriptors corresponding to the one or more versions of the identified application.