# US 2020/0287918 A1 · Threat mitigation system and method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0287918 A1 - Document ID: US20200287918A1 - Status: Published application - Kind: A1 - Application number: 16/883,562 - Filed: 2020-05-26 - Published: 2020-09-10 - Earliest claimed: 2018-06-06 - Assignees: Reliaquest Holdings, LLC - Applicants: ReliaQuest Holdings, LLC - Inventors: Brian P. Murphy; Joe Partlow; Colin O'Connor; Jason Pfeiffer - Web page: https://patentgrep.com/patent/US20200287918A1 ## CPC - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 18/20: Analysing - G06F 18/214: Generating training patterns; Bootstrap methods, e.g. bagging or boosting - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 21/55: Detecting local intrusion or implementing counter-measures - G06F 21/554: {involving event detection and direct action} - G06F 21/56: Computer malware detection or handling, e.g. anti-virus arrangements - G06F 21/561: {Virus type analysis} - G06F 21/562: {Static detection} - G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities} - G06F 21/568: {eliminating virus, restoring damaged files} - G06F 30/20: Design optimisation, verification or simulation (optimisation, verification or simulation of circuit designs G06F30/30) - G06N 7/01: Probabilistic graphical models, e.g. probabilistic networks - G06N 20/00: Machine learning - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/0263: {Rule management} - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/1433: {Vulnerability analysis} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - H04L 63/164: {at the network layer} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2115: Third party - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer-implemented method, computer program product and computing system for: obtaining consolidated platform information for a computing platform to identify one or more deployed security-relevant subsystems; processing the consolidated platform information to identify one or more non-deployed security-relevant subsystems; generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems; and providing the list of ranked & recommended security-relevant subsystems to a third-party. ## Claims ### Claim at position 1 1-21. (canceled) ### Claim 22 A computer-implemented method, executed on a computing device, comprising: obtaining consolidated platform information for a computing platform to identify one or more deployed security-relevant subsystems; utilizing artificial intelligence/machine learning to process the consolidated platform information to identify one or more non-deployed security-relevant subsystems; generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems; and providing the list of ranked & recommended security-relevant subsystems to a third-party. ### Claim 23 (depends on 21) The computer-implemented method of claim 21 wherein generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems includes: ranking the one or more non-deployed security-relevant subsystems based upon the anticipated use of the one or more non-deployed security-relevant subsystems within the computing platform. ### Claim 24 (depends on 21) The computer-implemented method of claim 21 further comprising: identifying a comparative for at least one of the non-deployed security-relevant subsystems defined within the list of ranked & recommended security-relevant subsystems. ### Claim 25 (depends on 23) The computer-implemented method of claim 23 wherein the comparative includes: vendor customers in a specific industry comparative. ### Claim 26 (depends on 23) The computer-implemented method of claim 23 wherein the comparative includes: vendor customers in any industry comparative. ### Claim 27 (depends on 21) The computer-implemented method of claim 21 wherein the consolidated platform information is obtained from an independent information source. ### Claim 28 (depends on 21) The computer-implemented method of claim 21 wherein the consolidated platform information is obtained from a client information source. ### Claim 29 A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising: obtaining consolidated platform information for a computing platform to identify one or more deployed security-relevant subsystems; utilizing artificial intelligence/machine learning to process the consolidated platform information to identify one or more non-deployed security-relevant subsystems; generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems; and providing the list of ranked & recommended security-relevant subsystems to a third-party. ### Claim 30 (depends on 29) The computer program product of claim 29 wherein generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems includes: ranking the one or more non-deployed security-relevant subsystems based upon the anticipated use of the one or more non-deployed security-relevant subsystems within the computing platform. ### Claim 31 (depends on 29) The computer program product of claim 29 further comprising: identifying a comparative for at least one of the non-deployed security-relevant subsystems defined within the list of ranked & recommended security-relevant subsystems. ### Claim 32 (depends on 31) The computer program product of claim 31 wherein the comparative includes: vendor customers in a specific industry comparative. ### Claim 33 (depends on 31) The computer program product of claim 31 wherein the comparative includes: vendor customers in any industry comparative. ### Claim 34 (depends on 29) The computer program product of claim 29 wherein the consolidated platform information is obtained from an independent information source. ### Claim 35 (depends on 29) The computer program product of claim 29 wherein the consolidated platform information is obtained from a client information source. ### Claim 36 A computing system including a processor and memory configured to perform operations comprising: obtaining consolidated platform information for a computing platform to identify one or more deployed security-relevant subsystems; utilizing artificial intelligence/machine learning to process the consolidated platform information to identify one or more non-deployed security-relevant subsystems; generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems; and providing the list of ranked & recommended security-relevant subsystems to a third-party. ### Claim 37 (depends on 36) The computing system of claim 36 wherein generating a list of ranked & recommended security-relevant subsystems that ranks the one or more non-deployed security-relevant subsystems includes: ranking the one or more non-deployed security-relevant subsystems based upon the anticipated use of the one or more non-deployed security-relevant subsystems within the computing platform. ### Claim 38 (depends on 36) The computing system of claim 36 further comprising: identifying a comparative for at least one of the non-deployed security-relevant subsystems defined within the list of ranked & recommended security-relevant subsystems. ### Claim 39 (depends on 38) The computing system of claim 38 wherein the comparative includes: vendor customers in a specific industry comparative. ### Claim 40 (depends on 38) The computing system of claim 38 wherein the comparative includes: vendor customers in any industry comparative. ### Claim 41 (depends on 36) The computing system of claim 36 wherein the consolidated platform information is obtained from an independent information source. ### Claim 42 (depends on 36) The computing system of claim 36 wherein the consolidated platform information is obtained from a client information source.