Patent US6631473B2 successfully refreshed from Google Patents.
US6631473B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Adaptive countermeasure selection method and apparatus
Assignee: Sun Microsystems Inc
•
Filing: 2002-03-26
•
Granted: 2003-10-07
•
Expires: 2022-03-26
Abstract
Abstract A method of selecting a security model for an organization operating an application on the organization's computer network is described. A current strength level for a countermeasure is determined based on input data and rules corresponding to the application. The method and apparatus determine a recommended strength level for countermeasures based on the input data and security risk data. Based on the current strength level and the recommended strength level, the method determines and outputs a security model including a countermeasure and corresponding strength level. The method may also modify the model based on exception conditions. The method may be used to calculate the risk of attack to the application and degree to which the organization conforms to industry practices.
Inventors
- 👤 Timothy J. Townsend
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 05:42
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/14; H04L63/1441; G; G06; G06F; G06F21/00; G06F21/50; G06F21/57; G06F21/577; H04L63/10; H04L63/102
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
151 words
An apparatus for outputting data identifying a security model including at least one countermeasure and a recommended strength level for said at least one countermeasure, said apparatus comprising: input means operable to enable user input of data indicative of one or more risks associated with a set of attacks and input of data indicative of current strength levels of countermeasures included in a current security model; a rule database operable to store data relating strength levels of countermeasures to the effectiveness of said countermeasures against said one or more risks associated with a set of attacks; processing means for processing data received from said input means utilizing data stored in said rule database and data entered utilizing said input means to select a suggested security model including at least one countermeasure and its recommended strength level; and output means for outputting data identifying said security model selected by said processing means.
Claim 2
Independent Claim
151 words
An apparatus for outputting data identifying a security model including at least one countermeasure and a recommended strength level for said at least one countermeasure, said apparatus comprising: input means operable to enable user input of data indicative of one or more risks associated with a set of attacks and input of data indicative of current strength levels of countermeasures included in a current security model; a rule database operable to store data relating strength levels of countermeasures to the effectiveness of said countermeasures against said one or more risks associated with a set of attacks; processing means for processing data received from said input means utilizing data stored in said rule database and data entered utilizing said input means to select a suggested security model including at least one countermeasure and its recommended strength level; and output means for outputting data identifying said security model selected by said processing means.
Claim 3
Dependent Claim
93 words
The apparatus of claim 1 , wherein said input means is operable to enable user input of data indicative of one or more business concerns and said rule database comprises: first association means operable to associate strength levels of each of a number of countermeasures with data probability data indicative of different types of attacks being averted by a said countermeasure at said strength level; and second association means operable to associate each of said one or more business concerns with data indicative of each said concern arising from different type of attacks.
Claim 4
Dependent Claim
81 words
The apparatus of claim 2 , wherein said input means is further operable to enable user input of data identifying one or more assets and loss data indicative of monetary losses to each said one or more assets resulting from each of said business concerns, wherein said processing means is operable to determine for each of said one or more assets the maximum loss related to a business concern and to utilize said determined maximum losses to select suggested security model.
Claim 5
Dependent Claim
40 words
An apparatus in accordance with any preceding claim 1 , wherein said rule database is further operable to store data relating each of said strength levels of said countermeasures to cost data indicative of the cost of implementing said countermeasures.
Claim 6
Dependent Claim
51 words
An apparatus in accordance with claim 1 , wherein said processing means is operable to determine the implementation cost for implementing security models, wherein said processing means is operable to select said suggested security model based upon the cost of implementing countermeasures at strength levels greater than said current strength levels.
Claim 7
Dependent Claim
28 words
An apparatus in accordance with claim 5 , wherein said processing means is further operable to modify the selected security model based on at least one exception condition.
Claim 8
Dependent Claim
82 words
An apparatus in accordance with claim 6 , wherein said processing means is operable to modify the selected security model based on user input data indicative of at least one or a combination of: (a) the organization's size; (b) number of transactions processed by the application; (c) monetary value of transactions processed by the application; (d) number of data transfer interfaces between the application and other applications; (e) configuration of the computer network; and (f) number of processors in the computer network.
Claim 9
Dependent Claim
42 words
An apparatus in accordance with claim 1 , wherein said processing means is further operable to modify the selection of a suggested security model based on user input of data indicative of an application being identified as sharing data with another application.
Claim 10
Dependent Claim
48 words
An apparatus in accordance with claim 1 , wherein said processing means is further operable to modify the selection of a security model based on user input of data indicative of an application has identified as operating on a computer network located in more than one geographic location.
Claim 11
Dependent Claim
70 words
An apparatus in accordance with claim 1 , wherein said processing means is further operable to: determine recommended policy effectiveness for the at least one countermeasure based upon the recommended strength level and a maximum effectiveness level; determine current policy effectiveness level based on a current strength level and the maximum effectiveness level; and determine a level of conformance based upon the current policy effectiveness and the recommended policy effectiveness.
Claim 12
Dependent Claim
34 words
An apparatus in accordance with claim 10 , wherein said determination of a level of conformance comprises determining a risk that an attack to the application will result in at least one business concern.
Claim 13
Dependent Claim
48 words
An apparatus in accordance with claim 1 , wherein said processing means is further operable to determine an implementation cost for the at least one countermeasure; and determine the countermeasure efficiency based on a maximum effectiveness level and the recommended strength level for the at least one countermeasure.
Claim 14
Dependent Claim
30 words
An apparatus in accordance with claim 1 , wherein said processing means is further operable to select said suggested security model based on said countermeasure efficiency determined for said model.
Claim 15
Dependent Claim
61 words
An apparatus in accordance with claim 1 , 2 , or 3 , wherein said input means further comprises a user interface enabling a user to enter responses to a set of questions relating to security procedures at an organization; and means for determining data indicative of current strength levels of countermeasures based upon the responses entered using said user interface.
Claim 16
Dependent Claim
42 words
A recording medium having stored thereon computer implementable program instructions for causing a programmable computer to become configured as an apparatus for outputting data identifying a security model in accordance with any of claims 1 - 3 and 5 - 13 .
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-10-06 | 2007-04-07 | 2007-10-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-10-06 | 2011-04-07 | 2011-10-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-10-06 | 2015-04-07 | 2015-10-07 | $7700.00 | Window Closed / Lapsed |