US 2020/0092319 A1Published application

Cognitive Security Exposure Analysis and Resolution Based on Security Trends

AssigneeInternational Business Machines Corporation

InventorsMichael Spisak, Steven D. McKay, Mariya Ali, Rhonda L. Childress, Michelle Rivers, Carlos E. Aguilera

Life of this patent

Estimating the term…

Loading patent…

Abstract

A security vulnerability analysis mechanism is provided that ingests content from a plurality of content source computing devices to identify instances of security vulnerability content in the ingested content. The mechanism performs a security trend analysis on the instances of security vulnerability content to identify a relative ranking of security vulnerabilities. The mechanism identifies computing resources of a specified computing infrastructure and a criticality of the computing resources to an operation of the computing infrastructure. The mechanism generates a prioritized listing of security vulnerabilities associated with the computing infrastructure based on the relative ranking of security vulnerabilities and the criticality of the computing resources in the computing infrastructure. The mechanism outputs a notification to a user via a user computing device, indicating the prioritized listing of security vulnerabilities.

Claims20

Dependent claims

A method, in a data processing system comprising a processor and a memory, the memory comprising instructions that are executed by the processor to specifically configure the processor to implement a security vulnerability analysis engine, the method comprising:

ingesting, by the security vulnerability analysis engine executing in the data processing system, content from a plurality of content source computing devices to identify instances of security vulnerability content in the ingested content;
performing, by the security vulnerability analysis engine, a security trend analysis on the instances of security vulnerability content to identify a relative ranking of security vulnerabilities;
identifying, by the security vulnerability analysis engine, computing resources of a specified computing infrastructure and a criticality of the computing resources to an operation of the computing infrastructure;
generating, by the security vulnerability analysis engine, a prioritized listing of security vulnerabilities associated with the computing infrastructure based on the relative ranking of security vulnerabilities and the criticality of the computing resources in the computing infrastructure;
and
outputting, by the security vulnerability analysis engine, a notification to a user via a user computing device, indicating the prioritized listing of security vulnerabilities.

3 more elements

A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to execute a security vulnerability analysis engine that operates to:

ingest content from a plurality of content source computing devices to identify instances of security vulnerability content in the ingested content;
perform a security trend analysis on the instances of security vulnerability content to identify a relative ranking of security vulnerabilities;
identify computing resources of a specified computing infrastructure and a criticality of the computing resources to an operation of the computing infrastructure;
generate a prioritized listing of security vulnerabilities associated with the computing infrastructure based on the relative ranking of security vulnerabilities and the criticality of the computing resources in the computing infrastructure;
and
output a notification to a user via a user computing device, indicating the prioritized listing of security vulnerabilities.

3 more elements

Dependencies are inferred from the claim text.