US 2017/0324763 A1 · Methods and Systems for Predicting Vulnerability State of Computer System

Abstract

A system uses a probabilistic technique to determine the vulnerability of similar assets based on the data provided on some assets. The probabilistic technique includes stages of preparing data followed by calculating probability; a preparing data stage, including gathering the latest vulnerability reports of all assets in a system with the help of known scanners; creating open vulnerabilities; enriching the obtained data of open vulnerabilities; creating all vulnerabilities; enriching the obtained data of all vulnerabilities. Following this stage, probability calculation may be done for three cases, when asset information is known, when asset information is partially unknown, and when asset information is completely unknown based on the data taken from open vulnerabilities and all vulnerabilities categorized into blocks of 6 months based on the time at which they have been reported to NIST/MITRE.

Claims20

Dependent claims

A method for determining a probability of vulnerability for similar software or hardware assets to known assets comprising:

gathering vulnerability reports with information regarding vulnerabilities of assets;
creating an enhanced open vulnerabilities table that is an accumulation of unaddressed vulnerabilities from vulnerability reports, and contains information that identifies vulnerability severity;
creating an enhanced all vulnerabilities table that is an accumulation of unaddressed vulnerabilities from vulnerability reports, and contains information that identifies at asset vulnerability;
calculating a probability of vulnerability for similar assets to a known asset as (number of open vulnerabilities)/(number of assets*number of all vulnerabilities);
and
using the probability to prioritize threats seen against the asset and take remedial action for high priority threats;
and
addressing vulnerabilities of assets in an order based on the probability.

5 more elements

Dependencies are inferred from the claim text.

Methods and Systems for Predicting Vulnerability State of Computer System

Life of this patent

Methods and Systems for Predicting Vulnerability State of Computer System

Life of this patent

Abstract

Claims20