Methods and systems for system vulnerability determination and utilization for threat mitigation

A system comprising:

• one or more computing system processors;
• and
• memory storing instructions that, when executed by the one or more computing system processors, causes the system to:
• receive network data associated with a first system of a network or a second system of the network, the network data comprising:
• first data associated with a vulnerability of the first system of the network or the second system of the network,
• second data associated with substantially real-time security event data associated with the first system of the network or the second system of the network,
• third data associated with one or more of:
• software code of a first application executed on the first system of the network or the second system of the network, and
• software code of a second application used by a threat-actor to attack the first system of the network or the second system of the network during a first time window,
• fourth data associated with identification information of the threat-actor;
• fifth data associated with a malware used to attack the first system of the network or the second system of the network;
• sixth data associated with security trend information during the first time window in which the threat-actor attacked the first system of the network or the second system of the network;
• quantify the first data, the second data, the third data, the fourth data, the fifth data, and the sixth data;
• determine a risk parameter based on the quantifying, the risk parameter indicating a security posture of the first system or the second system;
• generate a vulnerability profile for the first system of the network or the second system of the network based on the risk parameter, the vulnerability profile indicating a security weakness of the first system or the second system;
• and
• determine, based on the security weakness of the first system or the second system, a remediation protocol comprising remediation steps for minimizing the security weakness of the first system of the network or the second system of the network.

A method for securing an asset communicatively coupled to a security network, the method comprising:

• receiving, using one or more computing device processors, network data associated with a first system of a network or a second system of the network, the network data comprising:
• first data associated with a vulnerability of the first system of the network or the second system of the network,
• second data associated with substantially real-time security event data associated with the first system of the network or the second system of the network,
• third data associated with one or more of:
• software code of a first application executed on the first system of the network or the second system of the network, or
• software code of a second application used by a threat-actor to attack the first system of the network or the second system of the network during a first time window,
• fourth data associated with identification information of the threat-actor;
• fifth data associated with a malware used to attack the first system of the network or the second system of the network;
• sixth data associated with security trend information during the first time window in which the threat-actor attacked the first system of the network or the second system of the network;
• quantifying, using the one or more computing device processors, the first data, the second data, the third data, the fourth data, the fifth data, or the sixth data;
• determining, using the one or more computing device processors, a risk parameter based on the quantifying, the risk parameter indicating a security posture of the first system or the second system;
• generating, using the one or more computing device processors, a vulnerability risk profile for the first system of the network or the second system of the network based on the risk parameter, the vulnerability profile indicating a security weakness of the first system or the second system;
• and
• determining, using the one or more computing device processors, based on the security weakness of the first system or the second system, a remediation protocol comprising remediation steps for minimizing the security weakness of the first system of the network or the second system of the network.