Fish & Richardson P.C.
Value-adaptive security threat modeling and vulnerability ranking
Among others, techniques and systems are disclosed for analyzing security threats associated with software and computer vulnerabilities. Stakeholder values relevant for a software system are identified. The identified stakeholder values are quantified using a quantitative decision making approach to prioritize vulnerabilities of the software system. A structured attack graph is generated to include the quantified stakeholder values to define a scalable framework to evaluate attack scenarios. The structured attack graph includes two or more nodes. Based on the generated structured attack graph, structured attack paths are identified with each attack path representing each attack scenario.
University of Southern California
G H G G G
G06F H04L G06Q G06Q G06F
additional inventional inventional additional inventional
Barry W. Yue Luke
Boehm Chen Sheppard