Guidewire Software, Inc.

Cyence Inc.

Hewlett Packard Enterprise Development LP

George Y Ng

Fernando Tancioco, Jr

Brian Wu

Yoshifumi Yamamoto

Ming Yang

Feiyin Zhang

Paul Yang

Arvind Parthasarathi

Frank Beier

Olivier Giulieri

Zheng Cheung

Matthew Honea

Steven Paul Reinhardt

Siddharth R Ramakrishnan

Michael Andrew Thomson

Don Ma

Yuen Tsing Ooi

Philip A Rosace, Iii

Various embodiments disclosed include, for each entity in a portfolio, receiving entity data indicative of attributes of an entity, determining the received entity data for at least some entities is missing a portion of the entity data required to perform a cyber risk analysis; and synthesizing the missing portion. The method may further include comparing the received entity data and synthesized missing portion for each of the entities to each other; locating clusters of similar entity data shared between two or more of the entities; and calculating a cyber risk score representing how different the entities are to one another based on the entity data that are not shared between entities. Some embodiments include comparing entities that are missing some entity data to entities which have complete entity data, and generating a synthesized portfolio by selecting entities having complete entity data to replace the entities that are missing entity data.

Synthetic diversity analysis with actionable feedback methodologies

Inferential analysis includes: assessing risk of a cyber security failure in a computer network of an entity, using a computer agent configured to collect information from at least one accessible Internet elements, automatically determining, based on the assessed risk, a change or a setting to at least one element of policy criteria of a cyber security policy; and automatically recommending, based on the assessed risk, a computer network change to reduce the assessed risk.

Inferential analysis using feedback for extracting and combining cyber risk information

Systems and methods for cyber risk analysis and remediation using network monitored sensors are provided herein. An example system includes one or more data collecting devices deployed within a network that collect entity information and monitor network traffic of the network that is related to security information. The network includes computing systems that are subject to a cyber risk policy having breach parameters defining one or more events that are indicative of a cyber security breach. A cyber security risk assessment and management system is used to automatically detect occurrence of one or more of the events that are indicative of a cyber security breach, automatically determine the breach parameters that apply for the one or more events that occurred, and generates a remediation of cyber security parameters for the network.

Cyber risk analysis and remediation using network monitored sensors and methods of use

Assessing risk of a cyber security failure in a computer network of an entity includes: assessing risk of an entity, using a computer agent configured to collect information from at least publicly accessible Internet elements, and automatically recommending, based at least in part on the assessed risk, changes to reduce the assessed risk to mitigate the theoretical damage. The assessed risk comprises a cyber security failure risk in a computer network of the entity; and the assessing of risk comprises: generating a disaster scenario that comprises elements of a disaster event; modeling the disaster scenario against a profile of the entity; and determining theoretical damage based at least in part on the modeling.

Disaster scenario based inferential analysis using feedback for extracting and combining cyber risk information

Inferential analysis includes: assessing risk of a cyber security failure in a computer network of an entity, using a computer agent configured to collect information from at least one accessible Internet elements; automatically determining, based on the assessed risk, a change or a setting to at least one element of policy criteria of a cyber security policy; and automatically recommending, based on the assessed risk, a computer network change to reduce the assessed risk.

A graph analysis system provides a variety of graph analysis tools for analyzing graphs, such as an overall characteristics report, an entity types graph, an ego entity type graph, various histograms, and graph comparison reports. The graph analysis tools also include tools for calculating a similarity score for graphs based on characteristics and weights selected by a user.

Processing of a generate entity type graph component of a graph analysis system

Various embodiments of the present technology include methods of assessing risk of a cyber security failure in a computer network of an entity. Some embodiments involve using continual or periodic data collecting to improve inferential analysis, as well as obtaining circumstantial or inferential information from social networks. Machine learning may be used to improve predicitive capabilities. Some embodiments allow for identification of an entity from circumstantial or inferential information based on the machine learning and comparative analyses.

Various embodiments of the present technology include methods of assessing risk of a cyber security failure in a computer network of an entity. Some embodiments include generating a disaster scenario that includes elements of a disaster event, modeling the disaster scenario against a profile of the computer network and the entity, determining theoretical damage based on the modeling, and updating a cyber security policy or a network change to mitigate the theoretical damage.

Embodiments of the present technology relate to cyber attack vulnerability analyses. In one embodiment, a method includes determining an external infrastructure of an entity, the external infrastructure including one or more cyber assets utilized by the entity, collecting infrastructure information regarding the one or more cyber assets, performing passive cyber security vulnerability testing on the one or more cyber assets using the collected infrastructure information, and assessing cyber security vulnerabilities of the one or more cyber assets. The method may further include calculating an association score for the one or more cyber assets based on the assessed cyber security vulnerabilities, and automatically recommending, based on the association score, computer network changes to reduce the cyber security vulnerabilities.

Cyber vulnerability scan analyses with actionable feedback

Various embodiments of the present technology include methods of assessing risk of a cyber security failure in a computer network of an entity. Various embodiments also include automatically determining, based on the assessed risk, a change or a setting to at least one element of policy criteria of a cyber security policy, automatically recommending, based on the assessed risk, computer network changes to reduce the assessed risk, and providing one or more recommended computer network changes to reduce the assessed risk. Various embodiments further include enactment by the entity of at least one of the one or more of the recommended computer network changes to reduce the assessed risk to the entity, determining that the entity has enacted at least a portion of the recommended computer network changes, and in response, automatically reassessing the risk of a cyber security failure based on the enacted recommended computer network changes.

Growing community of inventors

San Mateo, CA, United States of America

George Y Ng