# US 2019/0379679 A1 · Threat mitigation system and method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0379679 A1 - Document ID: US20190379679A1 - Status: Published application - Kind: A1 - Application number: 16/432,488 - Filed: 2019-06-05 - Published: 2019-12-12 - Earliest claimed: 2018-06-06 - Assignees: Reliaquest Holdings, LLC - Applicants: ReliaQuest Holdings, LLC - Inventors: Brian P. Murphy; Joe Partlow; Colin O'Connor; Jason Pfeiffer - Web page: https://patentgrep.com/patent/US20190379679A1 ## CPC - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 18/20: Analysing - G06F 18/214: Generating training patterns; Bootstrap methods, e.g. bagging or boosting - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 21/55: Detecting local intrusion or implementing counter-measures - G06F 21/554: {involving event detection and direct action} - G06F 21/56: Computer malware detection or handling, e.g. anti-virus arrangements - G06F 21/561: {Virus type analysis} - G06F 21/562: {Static detection} - G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities} - G06F 21/568: {eliminating virus, restoring damaged files} - G06F 30/20: Design optimisation, verification or simulation (optimisation, verification or simulation of circuit designs G06F30/30) - G06N 7/01: Probabilistic graphical models, e.g. probabilistic networks - G06N 20/00: Machine learning - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/0263: {Rule management} - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/1433: {Vulnerability analysis} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - H04L 63/164: {at the network layer} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2115: Third party - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer-implemented method, computer program product and computing system for: obtaining first system-defined platform information concerning a first security-relevant subsystem within a computing platform; obtaining at least a second system-defined platform information concerning at least a second security-relevant subsystem within the computing platform; combining the first system-defined platform information and the at least a second system-defined platform information to form system-defined consolidated platform information; and generating a security profile based, at least in part, upon the system-defined consolidated platform information. ## Claims ### Claim 1 A computer-implemented method, executed on a computing device, comprising: obtaining first system-defined platform information concerning a first security-relevant subsystem within a computing platform; obtaining at least a second system-defined platform information concerning at least a second security-relevant subsystem within the computing platform; combining the first system-defined platform information and the at least a second system-defined platform information to form system-defined consolidated platform information; and generating a security profile based, at least in part, upon the system-defined consolidated platform information. ### Claim 2 (depends on 1) The computer-implemented method of claim 1 further comprising: obtaining client-defined consolidated platform information for the computing platform from a client information source. ### Claim 3 (depends on 2) The computer-implemented method of claim 2 wherein generating a security profile based, at least in part, upon the consolidated platform information includes: comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform. ### Claim 4 (depends on 1) The computer-implemented method of claim 1 wherein the first system-defined platform information and the at least a second system-defined platform information are obtained from one or more log files defined for the computing platform. ### Claim 5 (depends on 1) The computer-implemented method of claim 1 wherein the first system-defined platform information and the at least a second system-defined platform information are obtained from the first security-relevant subsystem and the at least a second security-relevant subsystem. ### Claim 6 (depends on 1) The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires. ### Claim 7 (depends on 1) The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors. ### Claim 8 A computer program product residing on a computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising: obtaining first system-defined platform information concerning a first security-relevant subsystem within a computing platform; obtaining at least a second system-defined platform information concerning at least a second security-relevant subsystem within the computing platform; combining the first system-defined platform information and the at least a second system-defined platform information to form system-defined consolidated platform information; and generating a security profile based, at least in part, upon the system-defined consolidated platform information. ### Claim 9 (depends on 8) The computer program product of claim 8 further comprising: obtaining client-defined consolidated platform information for the computing platform from a client information source. ### Claim 10 (depends on 9) The computer program product of claim 9 wherein generating a security profile based, at least in part, upon the consolidated platform information includes: comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform. ### Claim 11 (depends on 8) The computer program product of claim 8 wherein the first system-defined platform information and the at least a second system-defined platform information are obtained from one or more log files defined for the computing platform. ### Claim 12 (depends on 8) The computer program product of claim 8 wherein the first system-defined platform information and the at least a second system-defined platform information are obtained from the first security-relevant subsystem and the at least a second security-relevant subsystem. ### Claim 13 (depends on 8) The computer program product of claim 8 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires. ### Claim 14 (depends on 8) The computer program product of claim 8 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors. ### Claim 15 A computing system including a processor and memory configured to perform operations comprising: obtaining first system-defined platform information concerning a first security-relevant subsystem within a computing platform; obtaining at least a second system-defined platform information concerning at least a second security-relevant subsystem within the computing platform; combining the first system-defined platform information and the at least a second system-defined platform information to form system-defined consolidated platform information; and generating a security profile based, at least in part, upon the system-defined consolidated platform information. ### Claim 16 (depends on 15) The computing system of claim 15 further comprising: obtaining client-defined consolidated platform information for the computing platform from a client information source. ### Claim 17 (depends on 16) The computing system of claim 16 wherein generating a security profile based, at least in part, upon the consolidated platform information includes: comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform. ### Claim 18 (depends on 15) The computing system of claim 15 wherein the first system-defined platform information and the at least a second system-defined platform information are obtained from one or more log files defined for the computing platform. ### Claim 19 (depends on 15) The computing system of claim 15 wherein the first system-defined platform information and the at least a second system-defined platform information are obtained from the first security-relevant subsystem and the at least a second security-relevant subsystem. ### Claim 20 (depends on 15) The computing system of claim 15 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires. ### Claim 21 (depends on 15) The computing system of claim 15 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.