Michael Sutton Jacobs

US Patent:

7555778, Jun 30, 2009

Filed:

Oct 17, 2005

Appl. No.:

11/250449

Inventors:

Steven E. Noel - Woodbridge VA, US
Sushil Jajodia - Oakton VA, US
Brian C. O'Berry - North Potomac MD, US
Michael A. Jacobs - Tulsa OK, US

Assignee:

George Mason Intellectual Properties, Inc. - Fairfax VA

International Classification:

G06F 12/14
G06F 7/04
G06F 15/173

US Classification:

726 25, 726 3, 726 23, 709224

Abstract:

Disclosed is a network hardening mechanism. The mechanism: generates a dependency graph from a multitude of exploits; constructs a goal conditions expression which may then be used to determine set(s) of safe network configurations. A subset of these safe network configuration sets may then be selected for implementation using hardening costs as a criterion.

US Patent:

7904962, Mar 8, 2011

Filed:

Mar 10, 2006

Appl. No.:

11/371937

Inventors:

Sushil Jajodia - Oakton VA, US
Steven E. Noel - Dale City VA, US
Pramod Kalapa - Vienna VA, US
Brian C. O'Berry - North Potomac MD, US
Michael A. Jacobs - Tulsa OK, US
Eric B. Robertson - Vienna VA, US
Robert G. Weierbach - Arlington VA, US

Assignee:

George Mason Intellectual Properties, Inc. - Fairfax VA

International Classification:

G06F 12/14
G06F 12/16

US Classification:

726 25, 726 22, 726 23, 726 24, 709223, 709224

Abstract:

Disclosed is a system for modeling, analyzing, and responding to network attacks. Machines are mapped to components, components are mapped to vulnerabilities, and vulnerabilities are mapped to exploits. Each of the exploits includes at least one precondition mapped to at least one postcondition. An attack graph which defines inter-exploit distances is generated using at least one of the exploits. The attack graph is aggregated. At least one hardening option is determined using the aggregated attack graph. Hardening options include applying at least one corrective measure to at least one initial condition, where the initial condition is the initial state of a precondition.