Automatically detecting vulnerability regressions

A non-transitory computer-readable medium comprising memory with instructions encoded thereon for automatically detecting vulnerability remediations and regressions, the instructions causing one or more processors to perform operations when executed, the instructions comprising instructions to:

• obtain an identifier associated with a vulnerability and one or more vulnerability detection parameters associated with the vulnerability;
• generate a script based in part on the one or more vulnerability detection parameters;
• store the identifier associated with the vulnerability, the one or more vulnerability detection parameters, and the script relationally in a data structure;
• retrieve the script from the data structure based on the identifier associated with the vulnerability;
• periodically execute the retrieved script to determine whether the vulnerability has been remediated or reintroduced;
• responsive to determining that the vulnerability has been remediated, transmit, to a vulnerability tracking system, a first request to resolve a security alert, wherein the first request includes the identifier of vulnerability;
• and
• responsive to determining that the vulnerability has been reintroduced, transmit, to the vulnerability tracking system, a second request to reactivate the security alert, wherein the second request includes the identifier of the vulnerability.

A system for automatically detecting vulnerability remediations and regressions, the system comprising:

• memory with instructions encoded thereon;
• and
• one or more processors that, when executing the instructions, are caused to perform operations comprising:
• obtaining an identifier associated with a vulnerability and one or more vulnerability detection parameters associated with the vulnerability;
• generate a script based in part on the one or more vulnerability detection parameters;
• storing the identifier associated with the vulnerability, the one or more vulnerability detection parameters, and the script relationally in a data structure;
• retrieving the script from the data structure based on the identifier associated with the vulnerability;
• periodically executing the retrieved script to determine whether the vulnerability has been remediated or reintroduced;
• responsive to determining that the vulnerability has been remediated, transmitting, to a vulnerability tracking system, a first request to resolve a security alert, wherein the first request includes the identifier of vulnerability;
• and
• responsive to determining that the vulnerability has been reintroduced, transmitting, to the vulnerability tracking system, a second request to reactivate the security alert, wherein the second request includes the identifier of the vulnerability.