Vulnerability assessment based on machine inference
AssigneeKenna Security, Inc.
InventorsEdward T. Bellis, Michael Roytman, David Bortz, Jared Davis
Life of this patent
Estimating the term…
Abstract
Techniques related to vulnerability assessment based on machine inference are disclosed. A vulnerability assessment server may receive, from a client device, a set of metadata corresponding to a program stored on the client device. Further, the vulnerability assessment server may extract a program name from the set of metadata. Still further, the vulnerability assessment server may determine one or more vulnerabilities of the program based on searching for the program name in one or more storage systems that maintain sets of vulnerability data.
Claims20
A vulnerability assessment method comprising:
- receiving, from a client device, at a vulnerability assessment server, a set of metadata corresponding to a program stored on the client device;
- extracting, at the vulnerability assessment server, at least a program name and a vendor name from the set of metadata corresponding to the program;
- performing a search, in one or more storage systems that maintain sets of unstructured vulnerability data, for a set of unstructured vulnerability data corresponding to the program, wherein performing the search comprises:
- determining a set of query tokens that includes the program name;
- modifying, based on machine learning, the set of query tokens;
- generating a query that includes the modified set of query tokens;
- executing the query to identify the set of unstructured vulnerability data corresponding to the program;
- searching the one or more storage systems for a standardized program identifier that includes the program name;
- correlating the standardized program identifier to the set of unstructured vulnerability data corresponding to the program;
- identifying, at the vulnerability assessment server, one or more vulnerabilities of the program based on the set of unstructured vulnerability data corresponding to the program,
- wherein the method is performed by one or more computing devices.
A vulnerability assessment server system comprising:
- one or more processors;
- and
- one or more non-transitory storage media storing instructions which, when executed by the one or more processors, cause:
- receiving, at a vulnerability assessment server from a client device, a set of metadata corresponding to a program stored on the client device;
- extracting, at the vulnerability assessment server, at least a program name and a vendor name from the set of metadata corresponding to the program;
- determining, at the vulnerability assessment server, one or more vulnerabilities of the program based on searching, in one or more storage systems that maintain sets of unstructured vulnerability data, for a set of unstructured vulnerability data corresponding to the program, wherein searching comprises:
- determining a set of query tokens that includes the program name;
- modifying, based on machine learning, the set of query tokens;
- generating a query that includes the modified set of query tokens;
- executing the query to identify the set of unstructured vulnerability data corresponding to the program;
- searching the one or more storage systems for a standardized program identifier that includes the program name;
- correlating the standardized program identifier to the set of unstructured vulnerability data corresponding to the program.
Dependencies are inferred from the claim text.