Systems, methods, and computer-readable media for analyzing intercepted telemetry events to generate vulnerability reports supplemented with contextual data

A telemetry interception and analysis platform (TIAP) system, comprising:

• a server comprising a database and a processor to run a TIAP portal comprising an event service operative to receive a plurality of telemetry events and a plurality of usage events from a TIAP runtime being executed on a customer computer system in conjunction with an application being executed on the customer computer system,
• wherein the plurality of telemetry events are intercepted, at the TIAP portal, at a library level within a software stack running on the customer computer system,
• wherein each telemetry event of the plurality of telemetry events is associated with a particular instance of a particular component being called by the application,
• wherein each telemetry event of the plurality of telemetry events comprises a plurality of information categories populated by the TIAP runtime,
• wherein the plurality of usage events are intercepted, at the TIAP portal, for each method called in every class accessed within the software stack running on the customer computer system,
• wherein the plurality of usage events are specific to a particular programming language used in connection with the application,
• wherein the TIAP portal comprises a common vulnerability and exposure (CVE) service operative to receive a plurality of CVEs,
• wherein the plurality of CVEs are stored in the database,
• wherein the CVE service generates a list of vulnerable components by accessing the plurality of usage events that are intercepted at the TIAP portal and the plurality of CVEs that are received at the TIAP portal,
• wherein the TIAP portal displays the list of vulnerable components in a TIAP user interface, and
• wherein the TIAP portal displays a plurality of populated information categories pertaining to each displayed vulnerable component of the list of vulnerable components.

A method implemented in a telemetry interception and analysis platform (TIAP) system, the method comprising:

• executing, on a server comprising a database and a processor, a TIAP portal comprising an event service operative to receive a plurality of telemetry events and a plurality of usage events from a TIAP runtime being executed on a customer computer system in conjunction with an application being executed on the customer computer system;
• intercepting, at the TIAP portal, the plurality of telemetry events and the plurality of usage events, wherein each telemetry event of the plurality of telemetry events comprises a plurality of information categories populated by the TIAP runtime, and wherein the plurality of usage events are specific to a particular programming language used in connection with the application;
• receiving, at the TIAP portal, a plurality of common vulnerability and exposure (CVEs) from CVE sources by a CVE service;
• accessing, with the CVE service, the plurality of telemetry events and the plurality of usage events that are intercepted at the TIAP portal in conjunction with the plurality of CVEs that are received at the TIAP portal to generate a list of vulnerable components used by the application;
• accessing, with the CVE service, usage events pertaining to methods invoked and classes loaded by the application to provide an analysis indicating an extent a particular component is vulnerable;
• and
• displaying, by the TIAP portal, the list of vulnerable components in a ranked order as determined by the CVE service, wherein the plurality of populated information categories are displayed in conjunction with a respective vulnerable component.