US 11,599,643 B2 · Facilitating analysis of software vulnerabilities

Abstract

Systems and methods for facilitating an analysis of software vulnerabilities are described. The system receives a first request to present software vulnerabilities of a virtual machine on a production machine. The system receives a first request to present software vulnerabilities of a virtual machine on a production machine. The first request includes a first selection including a virtual machine identifier identifying the virtual machine on the production machine. The software vulnerabilities include a first software vulnerability. The system presents a first electronic user interface including software vulnerabilities for the virtual machine. The system receives a second request including a second selection identifying a first software vulnerability. The system presents a second electronic user interface including presenting recovery point identifiers corresponding to snapshot images stored on a database. The snapshot images being of the production machine and including the virtual machine and the first software vulnerability.

Drawings

Claims20

Dependent claims

A system comprising:

a processor and memory having instructions that, when executed by the processor, cause the the system to:
receive, over a network, a first request to present software vulnerabilities of a virtual machine on a production machine, the first request including a first selection including a virtual machine identifier identifying the virtual machine on the production machine, the software vulnerabilities including a first software vulnerability;
present, over the network, a first electronic user interface, the presenting the first electronic user interface being responsive to receiving the first request, the first electronic user interface including user interface elements representing the software vulnerabilities for the virtual machine, the user interface elements including a first set of user interface elements representing the first software vulnerability;
receive, over the network, a second request including a second selection identifying the first set of user interface elements representing the first software vulnerability;
and
present, over the network, at least one user interface including a second electronic user interface, responsive to the receiving the second request, the second electronic user interface including user interface elements presenting recovery point identifiers corresponding to snapshot images stored on a database, the snapshot images being of the production machine and including the virtual machine and the first software vulnerability.

3 more elements

A method comprising:

receiving, over a network, a first request to present software vulnerabilities of a virtual machine on a production machine, the first request including a first selection including a virtual machine identifier identifying the virtual machine on the production machine, the software vulnerabilities including a first software vulnerability;
presenting, over the network, a first electronic user interface, the presenting the first electronic user interface being responsive to receiving the first request, the first electronic user interface including user interface elements representing the software vulnerabilities for the virtual machine, the user interface elements including a first set of user interface elements representing the first software vulnerability;
receiving, over the network, a second request including a second selection identifying the first set of user interface elements representing the first software vulnerability;
and
presenting, over the network, at least one user interface including a second electronic user interface, responsive to the receiving the second request, the second electronic user interface including user interface elements presenting recovery point identifiers corresponding to snapshot images stored on a database, the snapshot images being of the production machine and including the virtual machine and the first software vulnerability.

2 more elements

Dependencies are inferred from the claim text.

Description20,689 words

Summary109 words

#This disclosure relates to the technical field of database maintenance and more particularly to facilitating analysis of software vulnerabilities.

#Patch management systems are utilized for the detection and remediation of software vulnerabilities identified in software systems. To this end, the patch management systems typically deploy software agents to enable the implementation of a standard communications protocol. For example, patch management systems may install a common software agent in each of the nodes of each of the software systems to enable a standard communications protocol across the different software environments. Notwithstanding the advantage of a standard communications protocol, the deploying of the software agents may create an unwanted engineering complexity.

Brief description of the drawings25 figures

#FIG. 1 is a block diagram illustrating a system, according to an embodiment, to manage software vulnerabilities;

#FIG. 2A is a block diagram illustrating software information, according to an embodiment;

#FIG. 2B is a block diagram illustrating list information, according to an embodiment;

Detailed description20,158 words

#This description is directed at three aspects of processing software vulnerabilities in snapshot images of a production machine. The three aspects broadly include managing software vulnerabilities, facilitating analysis of software vulnerabilities and identifying a software vulnerability, as follows:

#According to a first aspect, a backup machine (e.g., backup appliance) is utilized for managing software vulnerabilities by: A) retrieving snapshot images of a production machine stored in a database; B) processing the snapshot images to identify software vulnerabilities in virtual machines retrieved in the snapshot images; and C) pushing patch information to the production machine to patch the virtual machines. Identification of software vulnerabilities in snapshot images that are retrieved from a database has the advantage of enabling the identification and remediation of software vulnerabilities on the production machine without deploying or maintaining a software agent on the production machine for taking snapshot images.

#According to a second aspect, the backup machine (e.g., backup appliance) facilitates an analysis of software vulnerabilities by: A) presenting a first user interface including software vulnerabilities identified in a virtual machine on a production machine; B) receiving a request including a selection identifying a particular software vulnerability; and C) presenting a second electronic user interface including recovery point identifiers corresponding to snapshot images that are selectable to mount (load into memory) the snapshot image to facilitate an analysis of the software vulnerability in the snapshot image.

Facts

Application

16/668,910Filed 30 Oct 2019

Published

US 2021/0133327 A16 May 2021

Granted

7 Mar 2023

Term ends

29 Jun 2040

Estimated · how

20 years from earliest known nonprovisional domestic filing plus recorded patent term adjustment, including 243 days of adjustment. Maintenance-fee lapses, terminal disclaimers and statutory extensions have not been checked. The continuity chain may be incomplete; this is not an enforceability determination.

Classification11 codes

G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06F 9/45558
Hypervisors; Virtual machine monitors: hypervisor-specific management and integration aspects
G06F 11/1451
Management of the data involved in backup or backup restore: by selection of backup contents
G06F 11/1471
Error detection or correction of the data by redundancy in operations: involving logging of persistent data for recovery

Timeline

30 Oct 2019Application filedUS 16/668,910
18 Feb 2020Assigned to Rubrik, Inc.assignment of assignor's interest
6 May 2021PublishedUS 2021/0133327 A1
10 Jun 2022Assigned to Goldman Sachs Bdc, Inc., AS Collateral Agentgrant of security interest in patent rights
7 Mar 2023GrantedUS 11,599,643 B2
13 Jun 2025Assigned to Rubrik, Inc.release of security interest in patent collateral at reel/frame no. 60333/0323
12 Oct 2026TodayWithin its term
29 Jun 2040Term endsEstimated, includes 243 days of adjustment

Facilitating analysis of software vulnerabilities

Life of this patent

Facilitating analysis of software vulnerabilities

Life of this patent

Life of this patent

Abstract

Drawings

Drawings

Claims20

Description20,689 words

Classification11 codes

Life of this patent

Description20,689 words

Drawings