Prioritizing Patching of Vulnerable Components
AssigneeEMC IP Holding Company LLC
InventorsDanny V. Dhillon, Charles W. Kaufman, Eric Baize
Life of this patent
Estimating the term…
Abstract
Methods, apparatus, and processor-readable storage media for prioritizing patching of vulnerable components are provided herein. An example computer-implemented method includes obtaining information indicative of a first set of components embedded in a software package; determining risk levels for respective ones of the components in the first set based on a data flow representation of the software package; and assigning a priority for patching a software vulnerability in a given component of the first set based at least in part on the risk level of the given component.
Claims20
A computer-implemented method comprising:
- obtaining information indicative of a first set of components embedded in a software package;
- determining risk levels for respective ones of the components in the first set based on a data flow representation of the software package;
- and
- assigning a priority for patching a software vulnerability in a given component of the first set based at least in part on the risk level of the given component;
- wherein the method is performed by at least one processing device comprising a processor coupled to a memory.
A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:
- to obtain information indicative of a first set of components embedded in a software package;
- to determine risk levels for respective ones of the components in the first set based on a data flow representation of the software package;
- and
- to assign a priority for patching a software vulnerability in a given component of the first set based at least in part on the risk level of the given component.
An apparatus comprising:
- at least one processing device comprising a processor coupled to a memory;
- the at least one processing device being configured:
- to obtain information indicative of a first set of components embedded in a software package;
- to determine risk levels for respective ones of the components in the first set based on a data flow representation of the software package;
- and
- to assign a priority for patching a software vulnerability in a given component of the first set based at least in part on the risk level of the given component.
Dependencies are inferred from the claim text.