Cyber Risk Scoring for Vulnerable Component Reconfiguration

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing computing systems face vulnerabilities due to outdated or improperly configured software and hardware, lacking cybersecurity considerations, necessitating effective cyber risk assessment methods.

Innovation Solution

A computer-implemented method and system for cyber risk assessment that computes a risk score for computing systems, identifies vulnerable components, and automatically determines modifications to enhance security, including reconfiguration or replacement, while performing defensive actions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If manual security assessment methods are used, then security analysis can be performed, but the process is time-consuming and labor-intensive

Engineering Contradiction:

Improvesecurity assessment efficiencyVSAvoidtime for security assessment

Core Design Contradiction:

ProductivityVSLoss of time

Solution Approach 1:

The system enables automated self-assessment of security vulnerabilities by having the computing system itself provide configuration data and component information, which the processor then analyzes automatically without requiring manual intervention for data collection

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical assessment processes with automated computational analysis, where a processor automatically evaluates security risks by analyzing configuration data and comparing it against vulnerability databases, eliminating the need for manual security auditing

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If comprehensive vulnerability scanning is performed on all components, then security coverage is improved, but system complexity and resource consumption increase

Engineering Contradiction:

Improvesecurity coverageVSAvoidassessment system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the security assessment into distinct components: configuration data collection, vulnerability database queries, risk score calculation, and remediation recommendation, allowing each segment to be processed independently and efficiently

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The processor performs multiple functions using the same core mechanism: it collects configuration data, queries vulnerability databases, calculates risk scores, and generates recommendations, eliminating the need for separate specialized systems for each assessment task

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Measurement precision

If detailed risk scores are calculated for all components, then measurement precision is improved, but computational resources and processing time increase

Engineering Contradiction:

Improverisk score precisionVSAvoidcomputational resource consumption

Core Design Contradiction:

Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The system applies different levels of analysis depth to different components based on their security criticality, calculating detailed risk scores for high-value targets while using simplified assessments for less critical components

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The patent changes the parameters of risk calculation dynamically, adjusting the depth of vulnerability analysis and the number of factors considered based on the component's importance and the available computational resources

Inventive Principle:

Principle #35Parameter changes

4Productivity

If automated remediation actions are implemented, then security improvement speed is increased, but the risk of incorrect modifications increases

Engineering Contradiction:

Improveremediation implementation speedVSAvoidmodification accuracy

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs preliminary validation of remediation actions by checking for potential conflicts with other security controls and verifying that the proposed changes align with security best practices before implementation

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent incorporates feedback mechanisms where the system monitors the results of implemented remediation actions and uses this information to improve future automated decisions, creating a learning loop that reduces errors over time

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20260006060A1Systems and methods for cyber risk assessment for computing systems

Publication Date: 2026.01.01 TENNESSEE TECHNOLOGICAL UNIVERSITY

AI summary

A computer-implemented method for cyber risk assessment for computing systems may include computing a risk score for a computing system. The computing system may include one or more components. The one or more components may include one or more physical components or one or more software components. The risk score may include a value indicating a risk of exploitation of the computing system. The method may include determining one or more modifications to at least one of the one or more components of the computing system. The one or more modifications may increase the security of the computing system. The method may include performing a sensitivity analysis on the computing system. The method may include generating an order of reconfiguring or replacing vulnerable components of the computing system. The method may include performing a defensive action on the computing system.