Back to results
US 12,744,800 B1Granted
Vulnerability exceptions for monitoring a compute environment
AssigneeFortinet, Inc.
InventorsShubhanan D. Bakre, Chitra P. Kumar, Deepak B. Dalvi, Nolan K. Karpinski, Naveen Kumar Bibinagar, Yijou Chen
Life of this patent
Estimating the term…
Abstract
An illustrative method for monitoring a cloud environment may include determining, based on a scan of a compute environment, a set of vulnerable software components in the compute environment, identifying a subset of the vulnerable software components that satisfy an active vulnerability exception, and performing, based on the set of the vulnerable software components, a remedial operation, wherein the subset of the vulnerable software components is deprioritized for the remedial operation based on the active vulnerability exception.
Claims20
A method comprising:
- detecting, by a data platform, a request to implement a vulnerability exception, wherein the vulnerability exception specifies one or more conditions used to identify one or more vulnerable software components that satisfy the one or more conditions and a vulnerable software component comprises a software component having a flaw that exposes a software component;
- implementing, by the data platform and based on the request, the vulnerability exception to an active state;
- comparing, by the data platform, software components deployed in a compute environment to one or more identifiers representative of predetermined vulnerabilities to determine a set of vulnerable software components in the compute environment;
- comparing, by the data platform, attributes of each vulnerable software component to the one or more conditions specified in the vulnerable exception to identify a subset of the vulnerable software components;
- and
- performing, by the data platform and based on the set of the vulnerable software components, a remedial operation, wherein the subset of the vulnerable software components is deprioritized for the remedial operation based on the vulnerability exception being in the active state.
3 more elements
A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions capable of being executed to:
- detect a request to implement a vulnerability exception, wherein the vulnerability exception specifies one or more conditions used to identify one or more vulnerable software components that satisfy the one or more conditions and a vulnerable software component comprises a software component having a flaw that exposes a software component;
- implement based on the request, the vulnerability exception to an active state;
- compare software components deployed in a compute environment to one or more identifiers representative of predetermined vulnerabilities to determine a set of vulnerable software components in the compute environment, wherein a vulnerable software component comprises a software component having a flaw that exposes a software component;
- compare attributes of each vulnerable software component to one or more conditions specified in a vulnerability-exception to identify a subset of the vulnerable software components;
- and
- perform, based on the set of the vulnerable software components, a remedial operation, wherein the subset of the vulnerable software components is deprioritized for the remedial operation based on the active vulnerability exception.
3 more elements
A system comprising:
- a memory storing instructions;
- and
- a processor communicatively coupled to the memory and configured to execute the instructions to:
- detect a request to implement a vulnerability exception, wherein the vulnerability exception specifies one or more conditions used to identify one or more vulnerable software components that satisfy the one or more conditions and a vulnerable software component comprises a software component having a flaw that exposes a software component:
- implement based on the request, the vulnerability exception to an active state:
- compare software components deployed in a compute environment to one or more identifiers representative of predetermined vulnerabilities to determine a set of vulnerable software components in the compute environment, wherein a vulnerable software component comprises a software component having a flaw that exposes a software component;
- compare attributes of each vulnerable software component to one or more conditions specified in a vulnerable exception to identify a subset of the vulnerable software components;
- and
- perform, based on the set of the vulnerable software components, a remedial operation, wherein the subset of the vulnerable software components is deprioritized for the remedial operation based on the active vulnerability exception.
6 more elements
Dependencies are inferred from the claim text.