Quantitative Attack Space Analysis and Reasoning (QUASAR) Tool

With the rise in sophisticated cyber threats, there has been a growing demand for more advanced computer security defense techniques. Traditional security strategies often rely on the strengths of technologies, human expertise, and sometimes, even subjective judgment. While this approach can work, it can fall short when dealing with evolving cyber threats. Current approaches struggle to provide accurate and quantifiable data on the effectiveness of defense techniques, making it difficult to properly assess each one's viability against emerging threats. The main problem lies in the inability to translate defense techniques into measureable values that can be accurately analyzed, hindering effective counter strategy planning. Hence, there is a significant need for a comprehensive solution that can provide a quantitative assessment of defense techniques.

Technology Description

This innovative method, implemented by computer, allows quantitative evaluation of defense techniques against computer security threats.  The method uses an intelligent reasoning engine that takes the defense technique indicator as input. The technique gets translated into a propositional logic constraint on a Boolean model drawn from an accumulation of defense techniques and security threats. This forms a queryable representation. The differentiator of this technology is its ability to perform quantitative assessments based on these logic constraints. This method is a fresh, mathematical approach to the standard practices in computer security. The assessments then enable the quantification of each defense technique in relation to specific security threats. Furthermore, a displayed assessment result indicates the level of security protection provided by the defense technique, giving clear, quantifiable data to defend against cyber threats.