Back to results
US 12,598,209 B2Granted
Device vulnerability risk assessment system
AssigneeArista Networks, Inc.
InventorsArunabh Ghosh, Gary Joshua Golomb, Eric Jon Poynton
Life of this patent
Estimating the term…
Abstract
Systems and methods for risk assessment of network devices are disclosed herein. In particular, embodiments may determine risk scores for devices within a network that are highly individualized to each network device by leveraging data from a number of data sources. These data sources may include search results or the determination of network device data associated with the vulnerabilities, weaknesses, configuration errors or related conditions affecting each device or device type, ensuring a rich and pertinent set of data for risk score determination.
Claims16
A method for providing a risk score for a network device, comprising:
- determining an initial risk score for the network device in a network based on a Common Vulnerability Scoring System (CVSS) score associated with each of one or more CVEs associated with the network device, wherein the CVSS score associated with each of the one or more CVEs is adjusted based on a weighting factor, and wherein the one or more CVEs are obtained at a risk assessment system by issuing a query associated with the network device from the risk assessment system through an interface provided by a CVE data source and analyzing a result of the query received at the risk assessment system to determine the one or more CVEs;
- determining one or more factors based on network device data on dynamic operation of the network or the network device in the network, the network device data including data associated with reachability of the network device in the network;
- generating a risk score for the network device by adjusting the initial risk score based on the one or more factors determined for the network device based on the network device data including data associated with reachability of the network device in the network;
- storing the risk score;
- and
- providing the risk score to a user.
3 more elements
A method for providing a risk score for a network device, comprising:
- determining a set of Common Vulnerabilities and Exploits (CVE) for a network device in a network by issuing a query associated with the network device from a risk assessment system through an interface provided by a CVE data source and analyzing a result of the query received at the risk assessment system to determine the set of CVEs;
- determining if a software version is associated with the network device;
- when the software version is associated with the network device, filtering the set of CVEs based on the software version of the network device;
- determining an initial risk score for the network device based on the set of CVEs for the network device;
- generating a risk score for the network device by adjusting the initial risk score based on one or more factors associated with the network device, wherein the one or more factors include a popularity factor based on an obtained popularity score or a reachability factor associated with a reachability of the network device in the network;
- storing the risk score;
- and
- providing the risk score to a user.
5 more elements
A risk assessment system, comprising:
- a processor;
- and
- a non-transitory computer readable medium, comprising instructions executable on the processor for:
- determining a set of Common Vulnerabilities and Exploits (CVE) for a network device by issuing a query associated with the network device from the risk assessment system through an interface provided by a CVE data source and analyzing a result of the query received at the risk assessment system to determine the set of CVEs;
- determining if a software version is associated with the network device;
- when the software version is associated with the network device, filtering the set of CVEs based on the software version of the network device;
- when the software version is not associated with the network device, determining a software version discount factor;
- determining an initial risk score for the network device based on adjusting a Common Vulnerability Scoring System (CVSS) score associated with each of the set of CVEs for the network device adjusted based on a weighting factor, including adjusting the initial risk score by the software discount factor when the software version is not associated with the network device;
- generating a risk score for the network device by adjusting the initial risk score based on a popularity factor based on an obtained popularity score or a reachability factor associated with a reachability of the network device in the network;
- and
- providing the risk score to a user.
8 more elements
Dependencies are inferred from the claim text.