Detection of security incidents through simulations

    公开(公告)号:US10089475B2

    公开(公告)日:2018-10-02

    申请号:US15361288

    申请日:2016-11-25

    Applicant: SAP SE

    Abstract: A virtual testing environment VTE is instantiated for automated measurement of performance of a security monitoring system (SMS). Predefined attacks are executed against a cloned version of a monitored system in the VTE. The predefined attacks are defined at an attack catalog. Based on an execution result of the predefined attacks, a detection rate of the SMS at the VTE and a protection level of the cloned version of the monitored system are measured. Based on the detection rate and the protection level, an action for improving SMS and the protection of the monitored system is determined. Based on the determined action, logic modifications related to SMS and improvement on protection measures for the monitored system are performed.

    DETECTION OF SECURITY INCIDENTS THROUGH SIMULATIONS

    公开(公告)号:US20180150638A1

    公开(公告)日:2018-05-31

    申请号:US15361288

    申请日:2016-11-25

    Applicant: SAP SE

    CPC classification number: G06F21/577

    Abstract: A virtual testing environment VTE is instantiated for automated measurement of performance of a security monitoring system (SMS). Predefined attacks are executed against a cloned version of a monitored system in the VTE. The predefined attacks are defined at an attack catalog. Based on an execution result of the predefined attacks, a detection rate of the SMS at the VTE and a protection level of the cloned version of the monitored system are measured. Based on the detection rate and the protection level, an action for improving SMS and the protection of the monitored system is determined. Based on the determined action, logic modifications related to SMS and improvement on protection measures for the monitored system are performed.

Patent Agency Ranking