Battelle Memorial Institute

Md Touhiduzzaman

Sri Nikhil Gupta Gourisetti

Michael E Mylrea

Beverly E Johnson

Penny L McKenzie

Seemita Pal

Newton B Brown

Travis Ashley

Method include receiving banner information from one or more queries of a network connecting a set of devices, wherein the banner information of one or more of the devices includes common vulnerability and exposure identifiers (CVEs) and the banner information of one or more of the devices does not include a CVE, identifying the devices based on the banner information including classifying devices without known CVEs by a device type, determining vulnerability scores for the devices with known CVEs based on retrieved CVE information, and determining vulnerability scores for the devices without CVEs based on a series of exploitability and impact parameter estimates associated with the device type classifications. Some methods include estimating a cyberattack vulnerability risk for the devices using the determined vulnerability scores.

Mitigation of external exposure of energy delivery systems

Growing community of inventors

Richland, WA, United States of America

Md Touhiduzzaman