Managing cybersecurity vulnerabilities using blockchain networks

A non-transitory, computer-readable storage medium storing one or more instructions executable by a computer system to perform operations for cybersecurity vulnerability management, the operations comprising:

• maintaining, by a blockchain network, a blockchain that comprises one or more blocks storing a vulnerability record, wherein the vulnerability record comprises information of one or more cybersecurity vulnerabilities of computer-implemented services;
• maintaining, by the blockchain network, a smart contract for a cybersecurity vulnerability management scheme, wherein the smart contract comprises defined parties of the cybersecurity vulnerability management scheme and defined functions operable by the defined parties of the cybersecurity vulnerability management scheme, wherein the defined parties comprise an administration server and one or more service providers;
• receiving, by the blockchain network and from a client device, via a smart contract call of a function defined in the smart contract for submitting a vulnerability report, the vulnerability report indicating a cybersecurity vulnerability of a computer-implemented service provided by a service provider;
• providing, by the blockchain network, access to the vulnerability report to the administration server for verifying the cybersecurity vulnerability in the vulnerability report;
• receiving, by the blockchain network and from the administration server, a vulnerability verification report indicating a verification of the cybersecurity vulnerability in the vulnerability report submitted by the client device, wherein the vulnerability verification report comprise an identifier of the administration server;
• storing, by the blockchain network, information of the cybersecurity vulnerability into the vulnerability record that is stored on the blockchain network, wherein the information of the cybersecurity vulnerability is based on the vulnerability report and the vulnerability verification report;
• after storing the information of the cybersecurity vulnerability into the vulnerability record, providing, by the blockchain network, access to the vulnerability record to the service provider;
• and
• after providing the access to the vulnerability record to the service provider, receiving, by the blockchain network and from the service provider, a notification indicating a resolution to the cybersecurity vulnerability, wherein the notification comprises a service name of the computer-implemented service provided by the service provider, an identifier of the service provider, a description of the cybersecurity vulnerability, and a description of the resolution to the cybersecurity vulnerability.

A system for cybersecurity vulnerability management, comprising:

• one or more processors;
• and
• one or more computer-readable memories coupled to the one or more processors and having instructions stored thereon that are executable by the one or more processors to perform operations comprising:
• maintaining, by a blockchain network, a blockchain that comprises one or more blocks storing a vulnerability record, wherein the vulnerability record comprises information of one or more cybersecurity vulnerabilities of computer-implemented services;
• maintaining, by the blockchain network, a smart contract for a cybersecurity vulnerability management scheme, wherein the smart contract comprises defined parties of the cybersecurity vulnerability management scheme and defined functions operable by the defined parties of the cybersecurity vulnerability management scheme, wherein the defined parties comprise an administration server and one or more service providers;
• receiving, by the blockchain network and from a client device, via a smart contract call of a function defined in the smart contract for submitting a vulnerability report, the vulnerability report indicating a cybersecurity vulnerability of a computer-implemented service provided by a service provider;
• providing, by the blockchain network, access to the vulnerability report to the administration server for verifying the cybersecurity vulnerability in the vulnerability report;
• receiving, by the blockchain network and from the administration server, a vulnerability verification report indicating a verification of the cybersecurity vulnerability in the vulnerability report submitted by the client device, wherein the vulnerability verification report comprise an identifier of the administration server;
• storing, by the blockchain network, information of the cybersecurity vulnerability into the vulnerability record that is stored on the blockchain network, wherein the information of the cybersecurity vulnerability is based on the vulnerability report and the vulnerability verification report;
• after storing the information of the cybersecurity vulnerability into the vulnerability record, providing, by the blockchain network, access to the vulnerability record to the service provider;
• and
• after providing the access to the vulnerability record to the service provider, receiving, by the blockchain network and from the service provider, a notification indicating a resolution to the cybersecurity vulnerability, wherein the notification comprises a service name of the computer-implemented service provided by the service provider, an identifier of the service provider, a description of the cybersecurity vulnerability, and a description of the resolution to the cybersecurity vulnerability.