Systems and methods for detecting vulnerabilities in network processes during runtime

A non-transitory computer-readable medium comprising computer-readable instructions, which when executed by one or more processors at a network controller, cause the network controller to:

• obtain, from one or more sensors running on one or more endpoints, real-time process information associated with at least one process executing on at least one of the one or more endpoints, wherein the network controller is communicatively connected to the one or more endpoints over a communication network;
• determine package information for a corresponding package associated with the at least one process based on the real-time process information;
• and
• identify, during runtime of the at least one process on the at least one of the one or more endpoints, at least one vulnerability associated with the package information using a database of vulnerabilities available only to the network controller.

A network controller comprising:

• one or more processors storing computer-readable instructions;
• and
• one or more processors configured to execute the computer-readable instructions to:
• obtain, from one or more sensors running on one or more endpoints, real-time process information associated with at least one process executing on at least one of the one or more endpoints, wherein the network controller is communicatively connected to the one or more endpoints over a communication network;
• determine package information for a corresponding package associated with the at least one process based on the real-time process information;
• and
• identify, during runtime of the at least one process on the at least one of the one or more endpoints, at least one vulnerability associated with the package information using a database of vulnerabilities available only to the network controller.