US 11,308,219 B2Granted

System and method for multi-source vulnerability management

AssigneeF5, Inc.

InventorsLucas DuBois, Joseph Baker, Charles Hoang

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method for multi-source cloud-infrastructure vulnerability management includes receiving cloud-element information related to a cloud-based element in a cloud environment. The method also includes receiving first vulnerability information from a first vulnerability source and receiving second vulnerability information from a second vulnerability source. Cloud-element context information is also received about the cloud-based element from the cloud environment. A multiple-source vulnerability database is then generated from both the first vulnerability information and from the second vulnerability information. The cloud-element information and the cloud-element context information are then evaluated using the multiple-source vulnerability database to generate a vulnerability assessment.

Claims26

Dependent claims

A method for multi-source cloud-infrastructure vulnerability management, the method implemented by a network traffic management system comprising one or more network traffic apparatuses, client devices, or server devices, the method comprising:

receiving cloud-element data related to a cloud-based element in a cloud environment;
receiving first vulnerability data from a first vulnerability source;
receiving second vulnerability data from a second vulnerability source that is a vendor of a particular operating system;
receiving cloud-element context data comprising the particular operating system of about the cloud-based element from the cloud environment;
replacing the first vulnerability source and the second vulnerability source with a multiple-source vulnerability database generated from both the first vulnerability data and from the second vulnerability data such that a reported vulnerability from the first vulnerability source and a separate reported vulnerability from the second vulnerability source are combined into a single common vulnerability in the multiple-source vulnerability database;
evaluating the cloud-element data and the cloud-element context data using the multiple-source vulnerability database to generate a vulnerability assessment related to the single common vulnerability and the particular operating system;
and
generating a list of remediation steps in response to the vulnerability assessment.

5 more elements

A network traffic manager apparatus, comprising memory comprising programmed instructions stored in the memory and one or more processors configured to execute the programmed instructions stored in the memory to:

receive cloud-element data related to a cloud-based element in a cloud environment;
receive first vulnerability data from a first vulnerability source;
receive second vulnerability data from a second vulnerability source that is a vendor of a particular operating system;
receive cloud-element context data comprising the particular operating system of the cloud-based element from the cloud environment;
replace the first vulnerability source and the second vulnerability source with a multiple-source vulnerability database generated from both the first vulnerability data and from the second vulnerability data such that a reported vulnerability from the first vulnerability source and a separate reported vulnerability from the second vulnerability source are combined into a single common vulnerability in the multiple-source vulnerability database;
evaluate the cloud-element data and the cloud-element context data using the multiple-source vulnerability database to generate a vulnerability assessment related to the single common vulnerability and the particular operating system;
and
generate a list of remediation steps in response to the vulnerability assessment.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/516,450Filed 19 Jul 2019
Published: US 2021/0019423 A121 Jan 2021
Granted: 19 Apr 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06F 21/552
Detecting local intrusion or implementing counter-measures: involving long-term monitoring or reporting
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
G06F 21/562
Computer malware detection or handling, e.g. anti-virus arrangements: static detection

Family

US 2021/0019423 A1Pre-grant publication · published 21 Jan 2021
US 11,308,219 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key