System for generation and reuse of resource-centric threat modeling templates and identifying controls for securing technology resources

Abstract

Systems, computer program products, and methods are described herein for creating reusable resource-centric threat models and identifying controls for securing resources within a network. The present invention is configured to determine that an internal resource in a network requires protection from unauthorized external access; electronically receive information associated with the internal resource within the network; determine one or more threat vectors associated with the internal resource; electronically retrieve from a controls library, a control template associated with a resource category matching the resource category of the internal resource; and apply the control template to the internal resource.

Description

BACKGROUND[0001]With the growth in the Internet, securing technology resources has become an integral part of computer and information. Typically, securing technology resources includes measures adopted to avoid loss in the form of confidentiality, integrity, and availability of these resources. Breaches in technology resources typically result in these types of losses against customer and client information, payment information, personal files, account details, which can be detrimental to both the entity and the customer involved. Threat modeling is a systematic approach to ensure that the technology resources are protected against all possible threat vectors.BRIEF SUMMARY[0002]The following presents a simplified summary of one or more embodiments of the present invention, in order to provide a basic understanding of such embodiments. This summary is not an extensive overview of all contemplated embodiments, and is intended to neither identify key or critical elements of all embodi...

AI Technical Summary

Benefits of technology

The patent describes a system that helps reduce the risk of accessing internal resources through malicious threats. It does this by monitoring access through different threat vectors and regulating the controls to reduce the exposure score associated with each threat. The system also determines if adding more controls would be cost-effective and recommends them to the user. The user then selects which controls to incorporate. Overall, the system helps minimize risks associated with accessing internal resources.

Problems solved by technology

Breaches in technology resources typically result in these types of losses against customer and client information, payment information, personal files, account details, which can be detrimental to both the entity and the customer involved.

Images