Deep cyber vulnerability mitigation system
AssigneeUniversity of South Florida
InventorsAnkit Shah, Soumyadeep Hore
Life of this patent
Estimating the term…
Abstract
A method, system, or apparatus for mitigating computer and network security deficiencies is provided in which, the method, system, or apparatus scans computer system components for finding a vulnerability, generates a Vulnerability Priority Scoring System (VPSS) score for the vulnerability based on the vulnerability, develops a vulnerability mitigation policy based on a system state comprising the VPSS score, wherein the vulnerability mitigation policy provides a best action for mitigating the vulnerability selected among one or more trained possible actions by a deep neural network, and performs the vulnerability mitigation policy based on the best action. Other aspects, embodiments, and features are also claimed and described.
Claims19
A method for mitigating computer and network security deficiencies comprising:
- obtaining a vulnerability scan report for a vulnerability of a computer network;
- generating a vulnerability score using a defender agent, based on the vulnerability scan report;
- wherein the vulnerability score is determined at least in part by:
- a relevance of a network segment in which the vulnerability is reported, a level of existing protection in the network segment, a number of high-value assets in the network segment, or a length of time of the vulnerability residing in the network segment;
- providing the vulnerability score and the vulnerability scan report to an adversary;
- capturing, with the adversary, a plurality of vulnerability instances based on identified harmful policies of the computer network;
- updating the vulnerability score based on the plurality of vulnerability instances;
- providing, via the adversary, the updated vulnerability score to the defender agent;
- developing a vulnerability mitigation policy based on a system state comprising the vulnerability score;
- and
- recommending a set of mitigation efforts based on a best action for mitigating the vulnerability.
A system for mitigating computer and network security deficiencies, the system comprising:
- one or more computer components;
- one or more processors in communication with the one or more computer components;
- a memory in communication with the one or more processors and having instructions stored thereon that, when executed, cause the one or more processors to:
- receive a vulnerability scan report for a vulnerability of the one or more computer components;
- generate a vulnerability score using a defender agent based on the vulnerability scan report, wherein the vulnerability score is determined at least in part by:
- a relevance of a network segment in which the vulnerability is reported, a level of existing protection in the network segment, a number of high-value assets in the network segment, or a length of time of the vulnerability residing in the network segment;
- provide the vulnerability score and the vulnerability scan report to an adversary;
- capture, with the adversary, a plurality of instances based on identified harmful policies of the one or more computer components;
- updating the vulnerability score based on the plurality of vulnerability instances;
- provide, via the adversary, the updated vulnerability score to the defender agent;
- develop a vulnerability mitigation policy based on a system state comprising the vulnerability score;
- recommend a set of mitigation efforts based on a best action for mitigation the vulnerability.
Dependencies are inferred from the claim text.