Loading patent…
AssigneeVMware, Inc.
InventorsVarun Murthy, Jason Roszak, Blake Ryan Watts, Matthew Conover, Arvind Ahuja
Estimating the term…
Disclosed are various approaches to automate vulnerability assessment implement policy-based mitigation. A plurality of vulnerability records from respective ones of a plurality of vulnerability feeds are aggregated. Each of the plurality of vulnerability records are stored in a standardized format. A plurality of enterprise-specific severity scores are generated by calculating an enterprise-specific severity score for each of the plurality of vulnerability records. Then, a web page can be created that includes at least a subset of the plurality of enterprise-specific severity scores and respective ones of the plurality of vulnerability records.
A system for automatically assessing and mitigating vulnerabilities, comprising:
The system of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the machine-readable instructions, when executed by the processor, further cause the computing device to at least:
The system of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the policy, when retrieved by the client device from the command queue, causes the client device to install an update to address the vulnerability.
The system of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the policy, when retrieved by the client device from the command queue, causes the client device to disable functionality related to the vulnerability.
The system of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the policy, when retrieved by the client device from the command queue, blocks the client device from access to a network resource until an update to address the vulnerability is installed.
The system of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the machine-readable instructions that cause the computing device to aggregate the plurality of vulnerability records further cause the computing device to at least:
The system of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein calculating the enterprise-specific severity score for each of the plurality of vulnerability records further comprises causing the computing device to at least repeatedly:
A method for automatically assessing and mitigating vulnerabilities, comprising:
The method of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, further comprising:
The method of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the policy, when retrieved by the client device from the command queue, causes the client device to install an update to address the vulnerability.
The method of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the policy, when retrieved by the client device from the command queue, causes the client device to disable functionality related to the vulnerability.
The method of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein the policy, when retrieved by the client device from the command queue, blocks the client device from access to a network resource until an update to address the vulnerability is installed.
The method of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein aggregating the plurality of vulnerability records further comprises:
The method of claim Error! Bookmark not defined. for automatically assessing and mitigating vulnerabilities, wherein calculating the enterprise-specific severity score for each of the plurality of vulnerability records further comprises:
A non-transitory computer-readable medium comprising machine-readable instructions for automatically assessing and mitigating vulnerabilities that, when executed by a processor, cause a computing device to at least:
The non-transitory computer-readable medium of claim Error! Bookmark not defined., wherein the machine-readable instructions for automatically assessing and mitigating vulnerabilities, when executed by the processor, further cause the computing device to at least:
The non-transitory computer-readable medium of claim Error! Bookmark not defined., wherein the policy, when retrieved by the client device from the command queue, causes the client device to install an update to address the vulnerability.
The non-transitory computer-readable medium of claim Error! Bookmark not defined., wherein the policy, when retrieved by the client device from the command queue, causes the client device to disable functionality related to the vulnerability.
The non-transitory computer-readable medium of claim Error! Bookmark not defined., wherein the policy, when retrieved by the client device from the command queue, blocks the client device from access to a network resource until an update to address the vulnerability is installed.
The non-transitory computer-readable medium of claim Error! Bookmark not defined., wherein calculating the enterprise-specific severity score for each of the plurality of vulnerability records further comprises causing the computing device to at least repeatedly:
Dependencies are inferred from the claim text.