Back to results
US 11,698,977 B1Granted
Predicting and quantifying weaponization of software weaknesses
AssigneeIvanti, Inc.
InventorsBenjamin Anthony Mixon-Baca, Srinivas Mukkamala
Life of this patent
Estimating the term…
Abstract
A method and/or computer software for estimating the probability that a software weakness will be used in an exploit and/or malware and the probability that the developed exploit and/or malware will result in a compromise.
Claims19
A method for providing a likelihood that a software weakness will be used in a future compromise, the method comprising:
- generating one or more covariates by performing a first preprocessing transformation on modeling data;
- inputting training group data into a first prediction program to create a model that predicts whether a software weakness will be integrated into one or both of an exploit and malware;
- applying a second preprocessing transformation program to the output of the first prediction program, the modeling data, and a simulated compromise covariate;
- performing a second statistical sampling function to an output of the second preprocessing transformation program;
- and
- applying a second predictive program to an output of the second statistical sampling function to, wherein an output of the second predictive program provides indicia of a probability that a software weakness will be used in a future compromise.
3 more elements
A non-transitory computer-readable medium comprising computer software for providing a likelihood that a software weakness will be used in a future compromise comprising:
- code for generating one or more covariates by performing a first preprocessing transformation on modeling data;
- code for inputting training group data into a first prediction program to create a model that predicts whether a software weakness will be integrated into one or both of an exploit and malware;
- code for applying a second preprocessing transformation program to the output of the first prediction program, the modeling data, and a simulated compromise covariate;
- code for performing a second statistical sampling function to an output of the second preprocessing transformation program;
- and
- code for applying a second predictive program to an output of the second statistical sampling function, wherein an output of the second predictive program provides indicia of a probability that a software weakness will be used in a future compromise.
3 more elements
Dependencies are inferred from the claim text.