Threat modeling and analysis

Patent metadata

Field	Value
Publication number	US-9602529-B2
Application number	US-201414242897-A
Country	US
Kind code	B2
Filing date	Apr 2, 2014
Priority date	Apr 2, 2014
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

A system is provided for modeling and analysis of cybersecurity threats may include a data flow diagram (DFD) creator, threat indicator and threat analyzer. The DFD creator may identify elements of an information system, and compose a DFD including nodes and edges representing components and data flows of the information system. The threat indicator may identify a cybersecurity threat to a particular element of the information system, and add a secondary node representing the cybersecurity threat to the DFD to thereby produce a threat-model DFD for the information system. In metadata associated with the nodes, edges and secondary node, the DFD creator and threat indicator may provide structured information including attributes of the components, data flows and cybersecurity threat. And the threat analyzer may perform an analysis of the cybersecurity threat based on the threat-model DFD and metadata associated with the nodes, edges and secondary node thereof.

First claim

What is claimed is:

1. An apparatus for implementation of a system for modeling and analysis of cybersecurity threats in a complex-system platform, the apparatus comprising a processor and a memory storing executable instructions that in response to execution by the processor cause the apparatus to implement at least:
a data flow diagram creator configured to identify elements of an information system configured for implementation by a complex-system platform, the elements including components and data flows therebetween, the components including one or more of a host, process, data store or external entity,
the data flow diagram creator also being configured to compose a data flow diagram for the information system, the data flow diagram including nodes representing the components and edges representing the data flows, and in metadata associated with the nodes and edges, provide structured information including attributes of the components and data flows;
a threat indicator coupled to the data flow diagram creator and configured to identify a cybersecurity threat to a particular element of the elements of the information system,
the threat indicator also being configured to add a secondary node representing the cybersecurity threat to the data flow diagram to thereby produce a threat-model data flow diagram for the information system, and in metadata associated with the secondary node, provide structured information including attributes of the cybersecurity threat; and
a threat analyzer coupled to the threat indicator and configured to perform an analysis of the cybersecurity threat based on the threat-model data flow diagram and metadata associated with the nodes, edges and secondary node thereof.

2. The apparatus of claim 1 , wherein the threat analyzer being configured to perform the analysis includes being configured to identify a measure of current risk of the cybersecurity threat to the particular element, identify a suggested mitigation implementable to reduce the measure of current risk to a lower, measure of residual risk, and provide in the metadata associated with the secondary node, further structured information including the measure of current risk, suggested mitigation and measure of residual risk.

3. The apparatus of claim 2 , wherein the cybersecurity threat refers to a circumstance or event with a likelihood to have an adverse impact on the information system or particular element, and the measure of current risk is a function of measures of the likelihood and adverse impact, and
wherein the further structured information provided in the metadata associated with the secondary node also includes the measures of likelihood and adverse impact.

4. The apparatus of claim 1 , wherein the data flow diagram creator being configured to provide structured information including attributes of the components and data flows includes being configured to provide structured information including hardware, software and communications attributes of at least some of the components and data flows.

5. The apparatus of claim 1 , wherein the data flow diagram creator being configured to provide structured information including attributes of the components and data flows includes being configured to provide structured information including any authentication, authorization or security controls to which the components and data flows are subject.

6. The apparatus of claim 1 , wherein the threat indicator being configured to provide structured information including attributes of the cybersecurity threat includes being configured to provide structured information including a description of the cybersecurity threat and a vulnerability giving rise thereto, and a description of any current security controls designed to mitigate the cybersecurity threat.

7. The apparatus of claim 1 , wherein the threat analyzer being configured to perform the analysis includes being configured to perform the analysis to thereby produce a threat analysis, and the memory stores further executable instructions that in response to execution by the processor cause the apparatus to further implement:
a reporter configured to generate a report from the threat analysis, and including an organized arrangement of at least some of the attributes of at least some of the components, data flows or cybersecurity threat.

8. A method of modeling and analysis of cybersecurity threats in a complex-system platform, the method comprising:
identifying elements of an information system configured for implementation by a complex-system platform, the elements including components and data flows therebetween, the components including one or more of a host, process, data store or external entity;
composing a data flow diagram for the information system, the data flow diagram including nodes representing the components and edges representing the data flows, and in metadata according to some metadata schema and associated with the nodes and edges, providing structured information including attributes of the components and data flows;
identifying a cybersecurity threat to a particular element of the elements of the information system;
adding a secondary node representing the cybersecurity threat to the data flow diagram to thereby produce a threat-model data flow diagram for the information system, and in metadata associated with the secondary node, providing structured information including attributes of the cybersecurity threat; and
performing an analysis of the cybersecurity threat based on the threat-model data flow diagram and metadata associated with the nodes, edges and secondary node thereof.

9. The method of claim 8 , wherein performing the analysis includes:
identifying a measure of current risk of the cybersecurity threat to the particular element;
identifying a suggested mitigation implementable to reduce the measure of current risk to a lower, measure of residual risk; and
providing in the metadata associated with the secondary node, further structured information including the measure of current risk, suggested mitigation and measure of residual risk.

10. The method of claim 9 , wherein the cybersecurity threat refers to a circumstance or event with a likelihood to have an adverse impact on the information system or particular element, and the measure of current risk is a function of measures of the likelihood and adverse impact, and
wherein the further structured information provided in the metadata associated with the secondary node also includes the measures of likelihood and adverse impact.

11. The method of claim 8 , wherein providing structured information including attributes of the components and data flows includes providing structured information including hardware, software and communications attributes of at least some of the components and data flows.

12. The method of claim 8 , wherein providing structured information including attributes of the components and data flows includes providing structured information including any authentication, authorization or security controls to which the components and data flows are subject.

13. The method of claim 8 , wherein providing structured information including attributes of the cybersecurity threat includes providing structured information including a description of the cybersecurity threat and a vulnerability giving rise thereto, and a description of any current security controls designed to mitigate the cybersecurity threat.

14. The method of claim 8 , wherein performing the analysis includes performing the analysis to thereby produce a threat analysis, and the method further comprises:
generating a report from the

Assignees

• Boeing Co

Inventors

• Jones Edmund J
• Costello Matthew W
• Schleiff Martin
• Miller David S
• Chetal Aradhna
• Belden Marion M
• Gallup Volha V

Classifications

• G06F2221/2101

  Auditing as a secondary aspect · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title