Scen Gen Scenario Generation Risk Mitigation www scorpioncomputerservices

  • Slides: 18
Download presentation
Scen. Gen Scenario Generation Risk Mitigation www. scorpioncomputerservices. com 1

Scen. Gen Scenario Generation Risk Mitigation www. scorpioncomputerservices. com 1

What is Scengen? Scen. Gen is a unique software program that can generate all

What is Scengen? Scen. Gen is a unique software program that can generate all possible scenarios for a given situation at a very high speed. People will often try to think of all possibilities for a given problem but depending on the complexity of the problem can they be sure they thought of everything and can they do it fast enough? Imagine it like this, if two chess computers were left to play against each other for long enough they would eventually play every possible game of chess. Now what if the rules of chess could be rewritten to represent any situation like a game and then Scen. Gen will output all the moves you can make according to the rules. 2

Scen. Gen X-Ray (concept) User Activity Production Defect Test Coverage 3

Scen. Gen X-Ray (concept) User Activity Production Defect Test Coverage 3

Technology Applications 1) Exhaustive Testing: Mission critical computer systems such as Air Traffic Control,

Technology Applications 1) Exhaustive Testing: Mission critical computer systems such as Air Traffic Control, Nuclear Plant control, Credit Card or Trading Transaction systems have a high cost of downtime. These Systems need to be tested for all possible circumstances, Scen. Gen can produce that complete test set and the testing can be automated. 2) Path Optimization & Defect reproduction: When the shortest path to a particular goal needs to be found whether it’s to reproduce a defect or to locate the fastest way to get to a location via travel options. Scen. Gen will simply generate all possible routes and then sort them by the ones with the fewest steps first. 3) Finance Management: A Money manager can now be assessed not only against the market index or his/her peers but against the best and worst versions of themselves. Scen. Gen can backtrack and generate all the possible trades they could have made and compare them to the ones they did make. If the reason why they made there trades are captured then it’s possible to reduce emotional trading or bad habits based on historical experience by presenting the trader with a probability of how right or wrong they are based on past performance in making this decision for this reason. 4) White Collar Crime DNA: When a crime such as insider trading occurs and the defense is that the trader was just lucky and when they traded was a coincidence, Scen. Gen can generate all the other possibilities thus calculating the likelihood of this being a coincidence. An 8 million to 1 coincidence would prove to a jury beyond reasonable doubt that the trader had inside knowledge just like DNA evidence at a murder scene 4 would give those odds that it’s someone else’s blood.

Technology Applications 5) Single Point of Failure (SPOF) Analysis: Scen. Gen can locate SPOFs

Technology Applications 5) Single Point of Failure (SPOF) Analysis: Scen. Gen can locate SPOFs in systems design including networks by generating all flows thru the network and then systematically simulating if each server/router of the network went offline how many flows would be impacted. 6) Disaster Recovery, Business Continuity: Scen. Gen can generate test and exercise scenarios for natural disaster or terrorist act combinations and ensure coverage in the emergency responders plans. 7) Cyber Security: As referred to in a) Exhaustive Testing above Scen. Gen can completely test a software system, Online security software from Bank Transfers to Credit Card websites are just another software system, if Scen. Gen can find a defect in a security system it may indicate a backdoor vulnerability. 8) Intelligence analysis: Building a model of a particular circumstance such as a business revenue model or the capabilities of the various powers in the middle east (Pakaistn, Israel, Iran, Afghanistan, etc), Scen. Gen can generate the possible scenarios and combinations that may play out. It's possible to weight these in terms of importance/risk too. 9) Disease, Drug or Chemicals: Scen. Gen can generate all possible combinations of chemical bonding, Drug conflicts or disease outbreaks. 5

Technology Applications 10) Financial Compliance Fraud and Abuse: Most current regulation SOX, SAS 70,

Technology Applications 10) Financial Compliance Fraud and Abuse: Most current regulation SOX, SAS 70, HIPPA is open to interpretation and wide open to circumvention as the policy is published but the implementations are all defined by the entities subject to the regulation. Scen. Gen can either strengthen the implementation by testing for circumventions or be applied by the Auditors to perform a more complete test. 11) Legal, Political Analysis: Scen. Gen can be used in white collar crime cases such as insider trading in a similar manner to DNA testing in that it can prove that the trades made and the timing of those trades is a 1 in 8 million chance of being a coincidence, thus mitigating reasonable doubt. Political analysis could benefit from Scen. Gen showing what the possible reactions could be for each stance on an issue. 12) Compliance: Either process and policy analysis or regulatory compliance to fully document or prove that a system has been thoroughly tested Scen. Gen can do the work to produce the audit evidence. 13) Impact Analysis: When changes to a project are proposed an impact assessment as to the impact of that change on the project needs to be made then Scen. Gen can simply be run twice. Once on the old unchanged model, once on the new model and the results compared – the difference is the impact. 14) Education & Research: When documents and whitepapers are marked up with recommendations of which ones should be read before or after which other ones, Scen. Gen can generate the reading/research lists for a given subject. 6

Inventor’s Bio Walter O’Brien B. Sc. CSAI brings more than fifteen years of corporate,

Inventor’s Bio Walter O’Brien B. Sc. CSAI brings more than fifteen years of corporate, entrepreneurial & consulting experience in small, medium and enterprise business environments. Some of Walter's achievements include being ranked as the 6 th fastest programmer in the world, led the national team in the Olympics in Informatics, and was granted an Extraordinary Ability EB 1 -1 visa by the US government as being of National Interest to the US economy. Walter has partnered with corporate leaders to reduce risks and costs while growing revenue and efficiency at companies such as Capital Group "The American Funds", Oracle, Fujitsu, Microsoft-Trados, Baltimore Technologies and Critical Path. Walter has advanced knowledge and demonstrated success in high volume order management and transaction IT architecture, quality assurance to 99. 99% uptime, process methodologies, globalization and regulatory compliance. Walter graduated with honors and holds a Bachelors of Science degree in Computer Science and Artificial Intelligence from Sussex University. Walter also holds certifications and industry training from New York Institute of Finance, JPMorgan Chase Plexus Group, CS First Boston, and HP Mercury. Walter is an active member of International Association of Software Architects and the Enterprise Architecture Forum. 7

Financial Management Performance Sell Buy B S AP = 13% AP = Actual Performance

Financial Management Performance Sell Buy B S AP = 13% AP = Actual Performance 8

Financial Management Performance AP = Actual Performance BP = Best Performance WP = Worst

Financial Management Performance AP = Actual Performance BP = Best Performance WP = Worst Performance B B S B B B S S B WP = -6% S S B B S S B AP = 13% S B S BP = 18% We now know that in a range from – 6 to +18 (24) The Money Manager is performing at 13+6/24 = 80% accuracy 9

Hopfield Neural Net 10 7 ->6 ->5 ->4 5 5 4 4 2 1

Hopfield Neural Net 10 7 ->6 ->5 ->4 5 5 4 4 2 1 1 3 5 1 5 No coverage here yet 3 Enough coverage here for now Dynamic weighting of the node’s business risk emulates a manual tester’s “instinct” behavior Heuristic: reduce weight of nodes as they are fired so that area’s not yet covered become relatively higher in importance 10

Scen. Gen Performance & Requirements What is Scen. Gen’s performance? Scen. Gen's speed will

Scen. Gen Performance & Requirements What is Scen. Gen’s performance? Scen. Gen's speed will depend on the hardware it runs on but for example on a regular 1 GHz laptop it can generate 250 human years of work in 1. 5 hrs, that's 1. 5 million scenarios per second. What systems would it take to run Scen. Gen? Scen. Gen is very powerful but optimized to be very small (<200 k) and lightweight in order to be as fast as possible. Scen. Gen is written in the C language and so it will run on any platform a Windows laptop, Unix, Linux, MAC, etc and has no special memory or hard drive requirements beyond space to store the scenarios generated. 11

Graphical Tree Output 12

Graphical Tree Output 12

RS Virtual Pointer Tree Structure • Rules Rules • Rules Rules • Rules Rules

RS Virtual Pointer Tree Structure • Rules Rules • Rules Rules • Rules Rules Rules • • • • • • • • • • • • • • 13

14

14

15

15

Slip. Knot Concurrency Testing 16

Slip. Knot Concurrency Testing 16

SPOF Hunting 17

SPOF Hunting 17

SPOF Hunting(A, B, C to 1, 2, 3) A 1 B 2 C 3

SPOF Hunting(A, B, C to 1, 2, 3) A 1 B 2 C 3 18