Method and system for facilitating application vulnerability drift analytics

A computing device configured to implement an execution of a method for providing vulnerability management by using drift analytics, the computing device comprising:

• a processor,
• a memory;
• and
• a communication interface coupled to each of the processor and the memory,
• wherein the processor is configured to:
• retrieve, via a compliance scanner and a software-composition analysis module, application data that corresponds to at least one application and is built into an application development pipeline;
• compare, via the compliance scanner and the software-composition analysis module, the retrieved application data with data from a database;
• aggregate, via the compliance scanner and the software-composition analysis module, based on a result of the comparing, at least one vulnerability report that corresponds to the at least one application, wherein the aggregating is further based on a predetermined configuration, the predetermined configuration including a predetermined schedule;
• append the at least one vulnerability report to a historical record that corresponds to the at least one application, the historical record including a plurality of previously collected vulnerability reports;
• determine at least one metric for each of the at least one application by using the corresponding historical record, wherein each respective at least one metric relates to a remediation ability of a corresponding application from the at least one application, wherein the determining of the at least one metric includes:
• parsing the aggregated vulnerability reports to identify software vulnerabilities for each respective corresponding application from the at least one application by comparing each respective application identifier associated with each respective corresponding application with each respective vulnerability identifier associated with each respective corresponding vulnerability to determine matching;
• and
• quantitatively identifying remediation abilities based on a result of the matching;
• generate at least one drift summary for the at least one application based on the determined at least one metric and the corresponding historical record;
• compare the at least one drift summary with at least one previously generated drift summary to identify at least one change, the at least one change relating to a vulnerability status;
• generate at least one drift report for the at least one application based on the identified at least one change;
• and
• implement a software patch, a remediation, or a software update to the at least one application, based on the generated at least one drift report, for addressing at least one vulnerability within the at least one vulnerability report.

A non-transitory computer readable storage medium storing instructions for providing vulnerability management by using drift analytics, the storage medium comprising executable code which, when executed by a processor, causes the processor to:

• retrieve, via a compliance scanner and a software-composition analysis module, application data that corresponds to at least one application and is built into an application development pipeline;
• compare, via the compliance scanner and the software-composition analysis module, the retrieved application data with data from a database;
• aggregate, via the compliance scanner and the software-composition analysis module, based on a result of the comparing, at least one vulnerability report that corresponds to the at least one application, wherein the aggregating is further based on a predetermined configuration, the predetermined configuration including a predetermined schedule;
• append the at least one vulnerability report to a historical record that corresponds to the at least one application, the historical record including a plurality of previously collected vulnerability reports;
• determine at least one metric for each of the at least one application by using the corresponding historical record, wherein each respective at least one metric relates to a remediation ability of a corresponding application from the at least one application, wherein the determining of the at least one metric includes:
• parsing the aggregated vulnerability reports to identify software vulnerabilities for each respective corresponding application from the at least one application by comparing each respective application identifier associated with each respective corresponding application with each respective vulnerability identifier associated with each respective corresponding vulnerability to determine matching;
• and
• quantitatively identifying remediation abilities based on a result of the matching;
• generate at least one drift summary for the at least one application based on the determined at least one metric and the corresponding historical record;
• compare the at least one drift summary with at least one previously generated drift summary to identify at least one change, the at least one change relating to a vulnerability status;
• generate at least one drift report for the at least one application based on the identified at least one change;
• and
• implement a software patch, a remediation, or a software update to the at least one application, based on the generated at least one drift report, for addressing at least one vulnerability within the at least one vulnerability report.