Abstract: Methods, systems, and computer storage media for providing security configuration management using a threat protection engine in a security management system. Security configuration management generally refers to creating, implementing, and maintaining a secure configuration for a computing environment. The threat protection engine provides security configuration management using a security configuration anticipated impact analysis model that is generated based on historical telemetry data. The security configuration anticipated impact analysis model supports generating a security configuration anticipated impact analysis that is a targeted assessment that evaluates implementing a security resolution for a security exposure. Based on the security configuration anticipated impact analysis, security configurations of entities (e.g., hardware, software, and network) are autonomously configured to balance security measures and productivity requirements.

Abstract: An improved system and method of measuring and evaluating a distributed denial of services (DDOS) attack includes arranging for a DDoS attack by engaging a network provider offering malicious services to attack a honeypot computerized device. The honeypot includes a packet sniffer used to measure the values of parameters of the DDoS attack useful in determining the method of attack, the origin and extent of the attack, in calculating methods for early determination that a DDoS attack is occurring, and methods of countering this type of DDoS attack before it occurs.