System for generation and reuse of resource-centric threat modeling templates and identifying controls for securing technology resources

Abstract

Systems, computer program products, and methods are described herein for creating reusable resource-centric threat models and identifying controls for securing resources within a network. The present invention is configured to determine that an internal resource in a network requires protection from unauthorized external access; electronically receive information associated with the internal resource within the network; determine one or more threat vectors associated with the internal resource; electronically retrieve from a controls library, a control template associated with a resource category matching the resource category of the internal resource; and apply the control template to the internal resource.

Description

BACKGROUND[0001]With the growth in the Internet, securing technology resources has become an integral part of computer and information. Typically, securing technology resources includes measures adopted to avoid loss in the form of confidentiality, integrity, and availability of these resources. Breaches in technology resources typically result in these types of losses against customer and client information, payment information, personal files, account details, which can be detrimental to both the entity and the customer involved. Threat modeling is a systematic approach to ensure that the technology resources are protected against all possible threat vectors.BRIEF SUMMARY[0002]The following presents a simplified summary of one or more embodiments of the present invention, in order to provide a basic understanding of such embodiments. This summary is not an extensive overview of all contemplated embodiments, and is intended to neither identify key or critical elements of all embodi...

AI Technical Summary

Benefits of technology

[0007]In some embodiments, the one or more controls are configured to be regulated to monitor access to the internal resource via at least one of the one or more threat vectors, thereby reducing the exposure score associated with each of the one or more threat vectors.

[0009]In some embodiments, the module is further configured to cause the at least one processor to: determine one or more additional controls; determine a cost associated with the incorporation of each of the one or more additional controls; determine that the cost associated with the incorporation of each of the one or more additional controls is lower than the difference between the exposure score associated with the at least one of the one or more threat vectors before implementation of the one or more additional controls and after the implementation of the one or more additional controls; based on determining that the cost associated with the incorporation of each of the one or more additional controls is lower than the difference between the exposure score associated with the at least one of the one or more threat vectors before implementation of the one or more additional controls and after the implementation of the one or more additional controls, initiate, via the established communicable link, a recommendation interface for display on the user device, the recommendation interface comprising the one or more additional controls; electronically receive, via the established communication link, a user selection of at least one of the one or more additional controls; and incorporate the one or more additional controls selected by the user.

Problems solved by technology

Breaches in technology resources typically result in these types of losses against customer and client information, payment information, personal files, account details, which can be detrimental to both the entity and the customer involved.

Images