Inria Institut National De Recherche En Informatique Et En Automatique

Johnson Controls Interiors Gmbh Co. Kg

Frédéric Beck

Patrick Welter

Christian Delus

Gabriel Stricher

Abdelkader Lahmadi

Jérôme Francois

Frédéric Selvini

Stéphane Jung

A computer-implemented method for testing cybersecurity of a target environment. The method includes: receiving data from the target environment, the data including software elements; accessing a database of vulnerabilities, and extracting therefrom a list of vulnerabilities including all of the vulnerabilities associated with an element; and building a list of vulnerability chains on the basis of the list of vulnerabilities. The building includes: for each given vulnerability in the list of vulnerabilities, comparing consequences of the current vulnerability with the means of the given vulnerability; when a similarity is found, defining one or more new chains by adding the given vulnerability to each of the chains in the current list, adding the new chain(s) to the list of vulnerability chains, and repealing the receiving and the accessing with the given vulnerability as the current vulnerability, and the list of vulnerability chains as the current list.

Computer-implemented method for testing the cybersecurity of a target environment

Growing community of inventors

Le Chesnay, France

Frédéric Beck