Automated vulnerability grouping
AssigneeServiceNow, Inc.
InventorsKurt Joseph Zettel, II, Lisa Henderson, Phillip DiCorpio, Volodymyr Osypov, Karan Shah, Xuchang Chen, Jerome Liu
Life of this patent
Estimating the term…
Abstract
Systems and methods for automatically grouping vulnerabilities into vulnerability groups are provided. Vulnerabilities are received in the vulnerability response system and are automatically grouped into one or more vulnerability groups based upon grouping fields defined in a vulnerability group rule.
Claims20
A vulnerability response system, comprising:
- a non-transitory memory, comprising a vulnerability grouping rule, the vulnerability grouping rule comprising an electronic indication of grouping fields for at least a portion of the plurality of vulnerability items;
- and
- one or more hardware processors configured to read instructions from the non-transitory memory to perform operations comprising:
- automatically grouping vulnerabilities of the vulnerability response system, by:
- receiving a plurality of vulnerability items;
- accessing the vulnerability group rule;
- automatically generating, based upon the vulnerability grouping rules, a vulnerability group for the at least portion of the plurality of vulnerability items, the vulnerability group based upon the electronic indication of grouping fields;
- and
- automatically grouping the at least portion of the plurality of vulnerability items with the vulnerability group, based upon the grouping fields.
A tangible, non-transitory, machine-readable medium, comprising machine-readable instructions that, when executed by one or more processors, cause the processors to:
- automatically group vulnerabilities of a vulnerability response system, by:
- receiving a plurality of vulnerability items;
- accessing a vulnerability group rule, the vulnerability grouping rule comprising an electronic indication of grouping fields for at least a portion of the plurality of vulnerability items;
- and
- automatically grouping the at least portion of the plurality of vulnerability items with a vulnerability group, based upon the grouping fields.
A method, comprising:
- automatically grouping vulnerabilities of a vulnerability response system, by:
- receiving a plurality of vulnerability items;
- accessing a vulnerability group rule, the vulnerability grouping rule comprising an electronic indication of grouping fields for at least a portion of the plurality of vulnerability items;
- and
- automatically grouping the at least portion of the plurality of vulnerability items with a vulnerability group, based upon the grouping fields.
Dependencies are inferred from the claim text.