SECURITY EVALUATION SYSTEMS AND METHODS

摘要

A system may be broken down into one or more components. Each of the components may be evaluated to ascribe a security score to each of the components. A composite security score may be generated for the system based on the security scores and a rate of decay measure characterizing a probabilistic security degradation of the system. The rate of decay measure may be applied to the composite security score to obtain a current composite security score.

主权项

1. A security evaluation method comprising:
receiving, with a processor of a security module including the processor and physical memory, a breakdown of a system into one or more components; evaluating, with the processor, each of the components to ascribe a security score to each of the components; generating, with the processor, a composite security score for the system based on the security scores; generating, with the processor, a rate of decay measure characterizing a probabilistic security degradation of the system; applying, with the processor, the rate of decay measure to the composite security score to obtain a current composite security score; and supplying, with the processor, the current composite security score.