Identifying a vulnerability of an asset of a network infrastructure to mitigate
AssigneeCorax Cyber Security, Inc.
InventorsJonathan Pope, Lewis Guignard, Thomas Beale
Life of this patent
Estimating the term…
Abstract
A first vulnerability that is associated with one or more nodes of a network graph that represent one or more assets of a network infrastructure may be identified. Furthermore, a second vulnerability that is associated with one or more nodes of the network graph may be identified. A determination may be made as to whether the first vulnerability or the second vulnerability contributes more to a probability of a security breach associated with the network infrastructure. A notification may be provided to mitigate the vulnerability that contributes more to the probability of the security breach associated with the network infrastructure.
Claims20
A method comprising:
- identifying a first vulnerability that is associated with one or more nodes of a network graph that represent one or more assets of a network infrastructure;
- identifying a second vulnerability that is associated with one or more nodes of the network graph that represent one or more assets of the network infrastructure;
- determining, by a processing device, whether the first vulnerability or the second vulnerability contributes more to a probability of a security breach associated with the network infrastructure;
- and
- providing a notification to mitigate the vulnerability that contributes more to the probability of the security breach associated with the network infrastructure.
A non-transitory computer readable medium comprising instructions that, when executed by a processing device, cause the processing device to perform operations comprising:
- identifying a first vulnerability that is associated with one or more nodes of a network graph that represent one or more assets of a network infrastructure;
- identifying a second vulnerability that is associated with one or more nodes of the network graph that represent one or more assets of the network infrastructure;
- determining whether the first vulnerability or the second vulnerability contributes more to a probability of a security breach associated with the network infrastructure;
- and
- providing a notification to mitigate the vulnerability that contributes more to the probability of the security breach associated with the network infrastructure.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled with the memory, to:
- identify a first vulnerability that is associated with one or more nodes of a network graph that represent one or more assets of a network infrastructure;
- identify a second vulnerability that is associated with one or more nodes of the network graph that represent one or more assets of the network infrastructure;
- determine whether the first vulnerability or the second vulnerability contributes more to a probability of a security breach associated with the network infrastructure;
- and
- provide a notification to mitigate the vulnerability that contributes more to the probability of the security breach associated with the network infrastructure.
Dependencies are inferred from the claim text.