US 2019/0166155 A1 · SYSTEM FOR GENERATING A COMMUNICATION PATHWAY FOR THIRD PARTY VULNERABILITY MANAGEMENT

Abstract

The invention utilizes a two-component system to detect third party security threats and drive improved security threat mitigation based on the detection. The first component of the system is a security threat assessment engine, which receives and/or identifies external data and internal data regarding third parties in order to determine information security threats posed by third-parties. The second component of the system is an analytics engine, which may comprise a machine learning component which is configured to detect threat patterns and anomalies. In response to the detection of the threat patterns and anomalies the security threat assessment engine may be modified in order to more accurately determine security threats. The system after identifying a security threat, generates a notification associated with the security threat and transfers the notification to a first set of third parties that may be affected by the security threat.

Claims20

Dependent claims

A system generating a communication pathway for managing third party vulnerabilities, the system comprising:

one or more memory devices having computer readable code stored thereon;
one or more processing devices operatively coupled to the one or more memory devices, wherein the one or more processing devices are configured to execute the computer readable code to:
identify a first security threat associated with at least one third party;
determine one or more applications associated with the first security threat;
identify a first set of third parties from a group of third parties associated with the one or more applications based on external data and internal data;
and
generate a notification and transfer the notification to the first set of third parties, wherein the notification is associated with the first security threat.

4 more elements

A computer program product for an information security threat assessment system for generating a communication pathway for managing third party vulnerabilities, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprises one or more executable portions for:

identifying a first security threat associated with at least one third party;
determining one or more applications associated with the first security threat;
identifying a first set of third parties from a group of third parties associated with the one or more applications based on external data and internal data;
and
generating a notification and transfer the notification to the first set of third parties, wherein the notification is associated with the first security threat.

2 more elements

Dependencies are inferred from the claim text.

System for generating a communication pathway for third party vulnerability management

Life of this patent

System for generating a communication pathway for third party vulnerability management

Life of this patent

Abstract

Claims20