US 11,601,465 B2 · Merging duplicate items identified by a vulnerability analysis

Abstract

An embodiment may involve a plurality of configuration items and an unmatched configuration item, wherein the unmatched configuration item is associated with a first set of attribute values and a first vulnerability, wherein the first vulnerability is associated with a first set of field values. The embodiment may further involve one or more processors configured to: (i) determine that the unmatched configuration item and a particular configuration item both represent a specific component, wherein the particular configuration item is associated with a second set of attribute values and a second vulnerability, wherein the second vulnerability is associated with a second set of field values; (ii) merge the unmatched configuration item into the particular configuration item; (iii) determine that the first vulnerability and the second vulnerability both represent a specific vulnerability; (iv) merge the first vulnerability into the second vulnerability; and (v) delete the unmatched configuration item and the first vulnerability.

Claims20

Dependent claims

A system comprising:

persistent storage containing a plurality of configuration items and an unmatched configuration item, wherein the unmatched configuration item is associated with a first vulnerability;
and
one or more processors configured to:
determine that the unmatched configuration item and a particular configuration item from the plurality of configuration items both represent a specific hardware or software component;
merge the unmatched configuration item and the particular configuration item;
determine that the first vulnerability and a second vulnerability associated with the particular configuration item both represent a specific vulnerability of the specific hardware or software component;
merge the first vulnerability and the second vulnerability;
and
delete the unmatched configuration item and the first vulnerability from the persistent storage.

6 more elements

A computer-implemented method comprising:

determining that an unmatched configuration item and a particular configuration item both represent a specific hardware or software component, wherein persistent storage contains a plurality of configuration items and the unmatched configuration item, wherein the unmatched configuration item is associated with a first vulnerability, and wherein the particular configuration item is from the plurality of configuration items;
merging the unmatched configuration item and the particular configuration item;
determining that the first vulnerability and a second vulnerability associated with the particular configuration item both represent a specific vulnerability of the specific hardware or software component;
merging the first vulnerability and the second vulnerability;
and
deleting the unmatched configuration item and the first vulnerability from the persistent storage.

3 more elements

Dependencies are inferred from the claim text.

Merging duplicate items identified by a vulnerability analysis

Life of this patent

Merging duplicate items identified by a vulnerability analysis

Life of this patent

Abstract

Claims20