Thomas L Chen

US Patent:

8601587, Dec 3, 2013

Filed:

Sep 3, 2010

Appl. No.:

12/875854

Inventors:

William S. Powell - Gibsonton FL, US
Thomas L. Chen - Seminole FL, US

Assignee:

Raytheon Company - Waltham MA

International Classification:

G06F 11/00
G06F 12/14
G06F 12/16
G08B 23/00

US Classification:

726 25

Abstract:

According to certain embodiments, a cyber threat analysis system generates a network model of a network infrastructure that is used by an organization, assigns a weighting value to each of a plurality of network elements of the network infrastructure according to a relative importance of the each network element to the organization, and generates an attack vector according to a determined vulnerability of the network infrastructure. The attack vector represents one or more illicit actions that may be performed to compromise the network infrastructure. The system may simulate, using a network modeling tool, the attack vector on the network model to determine one or more resulting ramifications of one or more of the plurality of network elements due to the attack vector, and determine a criticality level of the attack vector according to the weighting value of the one or more network elements.

US Patent:

20140245449, Aug 28, 2014

Filed:

Dec 2, 2013

Appl. No.:

14/094492

Inventors:

William Shane Powell - Gibsonton FL, US
Thomas L. Chen - Seminole FL, US

Assignee:

Raytheon Company - Waltham MA

International Classification:

H04L 29/06

US Classification:

726 25

Abstract:

According to certain embodiments, a cyber threat analysis system generates a network model of a network infrastructure that is used by an organization, assigns a weighting value to each of a plurality of network elements of the network infrastructure according to a relative importance of the each network element to the organization, and generates an attack vector according to a determined vulnerability of the network infrastructure. The attack vector represents one or more illicit actions that may be performed to compromise the network infrastructure. The system may simulate, using a network modeling tool, the attack vector on the network model to determine one or more resulting ramifications of one or more of the plurality of network elements due to the attack vector, and determine a criticality level of the attack vector according to the weighting value of the one or more network elements.