Hewlett-Packard Development Company, L.p.

Hewlett Packard Enterprise Development LP

Yolanta Beresnevichiene

David Plaquin

Christopher L Dalton

Marco Casassa Mont

Jonathan Griffin

Simon Kai-Ying Shiu

Fotios Tsifountidis

A system for analyzing an environment to identify a security risk in a process, comprising a model engine to generate a model of the environment using multiple components defining adjustable elements of the model and including components representing a patching process for the environment, a risk analyzer to calculate multiple randomized instances of an outcome for the environment using multiple values for parameters of the elements of the model selected from within respective predefined ranges for the parameters, and to use a results plan to provide data for identifying a security risk in the patching process using the multiple instances.

Method and system for analyzing an environment

A security risk of a computer network is assessed by simulating a threat environment of the computer network, wherein the threat environment includes a vulnerability and a website, simulating a protection environment of the computer network and a computer system in the computer network, and simulating network activity of the computer system. The security risk of the computer network is assessed based at least in part on the simulated threat environment, the simulated protection environment, and the simulated network activity of the computer system.

Network security risk assessment

A system for analyzing a process, comprising a model engine to generate a model of the environment using multiple components defining adjustable elements of the model and including components representing a process for provisioning and de-provisioning of access credentials for an individual in the environment and a risk analyzer to calculate multiple randomized instances of an outcome for the environment using multiple values for parameters of the elements of the model selected from within respective predefined ranges for the parameters, and to use a results plan to provide data for identifying the security risk using the multiple instances.

System and method for analyzing a process

A method of computer operating system data management comprising the steps of: (a) associating data management information with data input to a process (); and (b) regulating operating system operations involving the data according to the data management information is provided (). A computing platform () for operating system data management is also provided. Furthermore, a computer program including instructions configured to enable operating system data management, an operating system, and an operating system data management method and apparatus arranged to identify data having data management information associated therewith when that data is read into a memory space are provided.

Computer operating system data management

A data handling apparatus () for a computer platform () using an operating system executing a process, the apparatus comprising a system call monitor () for detecting predetermined system calls, and means () for applying a data handling policy to the system call upon a predetermined system call being detected, whereby the data handling policy is applied for all system calls involving the writing of data outside the process. A corresponding method is disclosed.

Growing community of inventors

Bristol, United Kingdom

Yolanta Beresnevichiene