Threat mitigation system and method
AssigneeReliaquest Holdings, LLC
InventorsBrian P. Murphy, Joe Partlow, Colin O'Connor, Jason Pfeiffer
Life of this patent
Estimating the term…
Abstract
A computer-implemented method, computer program product and computing system for: obtaining system-defined consolidated platform information for a computing platform from an independent information source; obtaining client-defined consolidated platform information for the computing platform from a client information source; and comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.
Claims30
A computer-implemented method, executed on a computing device, comprising:
- obtaining consolidated platform information for a computing platform;
- analyzing the consolidated platform information to evaluate one or more current security relevant capabilities for the computer platform;
- identifying one or more security assets which are available but not utilized by the computing platform including one or more of:
- features of the one or more security assets that are available but not utilized, features of the one or more security assets that are available but disabled, and expanded features of the one or more security assets;
- determining possible security-relevant capabilities for the computing platform, wherein the possible security-relevant capabilities accounts for the one or more security assets which are available but not utilized by the computing platform;
- generating comparison information that compares the current security-relevant capabilities of the computing platform to the possible security-relevant capabilities of the computing platform to identify security-relevant deficiencies;
- and
- generating a list of at least a portion of the one or more security assets that are available but not utilized by the computing platform to address at least a portion of the security-relevant deficiencies.
A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon, which, when executed by a processor, cause the processor to perform operations comprising:
- obtaining consolidated platform information for a computing platform;
- analyzing the consolidated platform information to evaluate one or more current security relevant capabilities for the computer platform;
- identifying one or more security assets which are available but not utilized by the computing platform including one or more of:
- features of the one or more security assets that are available but not utilized, features of the one or more security assets that are available but disabled, and expanded features of the one or more security assets;
- determining possible security-relevant capabilities for the computing platform, wherein the possible security-relevant capabilities accounts for the one or more security assets which are available but not utilized by the computing platform;
- generating comparison information that compares the current security-relevant capabilities of the computing platform to the possible security-relevant capabilities of the computing platform to identify security-relevant deficiencies;
- and
- generating a list of at least a portion of the one or more security assets that are available but not utilized by the computing platform to address at least a portion of the security-relevant deficiencies.
A computing system including a processor and memory configured to perform operations comprising:
- obtaining consolidated platform information for a computing platform;
- analyzing the consolidated platform information to evaluate one or more current security relevant capabilities for the computer platform;
- identifying one or more security assets which are available but not utilized by the computing platform including one or more of:
- features of the one or more security assets that are available but not utilized, features of the one or more security assets that are available but disabled, and expanded features of the one or more security assets;
- determining possible security-relevant capabilities for the computing platform, wherein the possible security-relevant capabilities accounts for the one or more security assets which are available but not utilized by the computing platform;
- generating comparison information that compares the current security-relevant capabilities of the computing platform to the possible security-relevant capabilities of the computing platform to identify security-relevant deficiencies;
- and
- generating a list of at least a portion of the one or more security assets that are available but not utilized by the computing platform to address at least a portion of the security-relevant deficiencies.
Dependencies are inferred from the claim text.