Computerimplementiertes Verfahren zur Sicherheitsbezogenen Kontrolle oder Konfiguration eines Digitalen Systems

Details

Veröffentlichungs-Nr.

EP3772838

Aktenzeichen

EP19190331

Anmeldetag

6. August 2019

Veröffentlichung

22. Mai 2024

Erteilung

22. Mai 2024

Rechtsraum

EP

IPC

H04L9/40G06F21/57G06F21/55

Abstract

A computer-implemented method of identifying and classifying a plurality of digital systems' and/or their components' vulnerabilities to one or more of a plurality of threats classes and/or attack types includes receiving system information data representing configurations of a plurality of digital systems, and receiving attack and/or threat information data associated with attacks on and/or threats posed to individual ones of the plurality of digital systems. The received system information data and the associated attack and/or threat information data is analysed for identifying one or more attack types and/or threat classes associated with individual ones of the digital systems. For each of the identified attack types and/or treat classes, correlations and/or causalities between individual system constituents or combinations thereof in the digital systems associated with attacks and/or threats are identified. Based on the identified correlations and/or causalities, an attack and/or threat vulnerability value is determined and assigned, for each attack or threat, respectively, to each of the systems and/or systems' constituents and/or combinations thereof. The attack and/or threat vulnerability values associated with the systems, system constituents and/or combinations thereof are retrievably stored.

Anmelder

Firmen

Continental Automotive Technologies GmbH
Continental Teves AG & Co. OHG

Land

🇩🇪 Deutschland

Fachgebiete