Cloud-based security profiling, threat analysis and intelligence
Assigneesalesforce.com, inc.
InventorsTimothy Bach, James Dolph
Life of this patent
Estimating the term…
Abstract
An automated software vulnerability scanning and notification system and method provide an automated detection and notification regarding a software vulnerability. The operation of the system and the method includes obtaining software vulnerability information, periodically scanning a web application and a corresponding web server associated with an operator, and evaluating the periodic scans relative to the software vulnerability information to detect software vulnerabilities. Upon detection of a software vulnerability, a notification message is provided automatically to the operator regarding the software vulnerability.
Claims24
An apparatus for providing an automated notification regarding a software vulnerability, comprising:
- a processor;
- and
- one or more stored sequences of instructions which, when executed by the processor, cause the processor to:
- obtain software vulnerability information;
- periodically scan at least one of a network application and a network server on which the application runs for information about software associated with the network application and the network server, the network application and network server having an associated operator;
- and
- evaluate the periodic scans relative to the software vulnerability information to detect software vulnerabilities;
- upon detection of a software vulnerability, automatically provide a notification message to the operator regarding the software vulnerability.
A non-transitory machine-readable medium carrying one or more sequences of instructions for comparing users, profiles, and permission sets which, when executed by one or more processors, cause the one or more processors to carry out the steps of:
- obtaining software vulnerability information;
- periodically scanning a web application and a corresponding web server associated with an operator;
- evaluating the periodic scans relative to the software vulnerability information to detect software vulnerabilities;
- and
- upon detection of a software vulnerability, automatically providing a notification message to the operator regarding the software vulnerability.
A method for providing an automated notification regarding a software vulnerability, comprising:
- obtaining software vulnerability information;
- periodically scanning a web application and a corresponding web server associated with an operator;
- evaluating the periodic scans relative to the software vulnerability information to detect software vulnerabilities;
- and
- upon detection of a software vulnerability, automatically providing a notification message to the operator regarding the software vulnerability.
Dependencies are inferred from the claim text.