System and method for determining security vulnerabilities
OwnerDale A. Dahlstrom, Keith P. Frederickinventors
Life of this patent
Estimating the term…
Abstract
A method for determining security vulnerabilities includes receiving a profile of one or more products used by an organization, the profile including characteristics of each product. The method further includes comparing the characteristics of each product to a plurality of product records, each product record including one or more security vulnerabilities associated with the product record and one or more fixes associated with each security vulnerability. The method further includes determining at least one of the one or more security vulnerabilities for at least one of the one or more products in response to comparing the characteristics of the at least one of the one or more products to the product record.
Claims40
A method for determining security vulnerabilities, the method comprising:
- receiving an organization profile of one or more products used by an organization, the organization profile including characteristics of each of the one or more products;
- comparing the characteristics of each of the one or more products to a plurality of product records, each product record identifying one or more security vulnerabilities associated with the product record and one or more fixes associated with the one or more security vulnerabilities;
- and
- determining the presence of at least one of the one or more security vulnerabilities for at least one of the one or more products in response to comparing the characteristics of the at least one of the one or more products to the plurality of product records.
A system for tracking vulnerabilities in an organization, the system comprising:
- an organization profile, the organization profile being associated with a particular organization and identifying one or more products used by the particular organization, the organization profile including characteristics of each of the one or more products;
- a security vulnerabilities database, the securities vulnerability database having one or more product records, each of the one or more product records being associated with at least one product and including information on one or more security vulnerabilities associated with the at least one product;
- and
- a search engine in communication with the organization profile and the security vulnerability database, the search engine operable to determine at least one security vulnerability of the organization in response to comparing the characteristics of at least one of the one or more products to at least one of the one or more product records.
A method of assessing the vulnerability of an organization, the method comprising:
- identifying at least one security vulnerability associated with one or more products used by the organization;
- and
- determining a risk rating for the security vulnerability in response to characteristics of the security vulnerability.
A method of tracking security vulnerabilities across an organization, the method comprising:
- assigning one or more security vulnerabilities to a particular individual within the organization, each of the one or more assigned security vulnerabilities being associated with one or more products used by the organization;
- assigning a pending designation to a status for each of the one or more assigned security vulnerabilities;
- and
- changing the status of one of the one or more security vulnerabilities from a pending designation to a complete designation in response to the one of the one or more security vulnerabilities being addressed by the individual.
40 The method of claim 31, and further comprising calculating statistical data for an organization in response to combining statistical data for the particular individual with statistical data associated with other individuals within the organization.
Dependencies are inferred from the claim text.