Ai based patch management

A method implemented on a computing system, the method comprising:

• obtaining metadata associated with target assets in an IP address range within a computing environment, wherein the metadata identifies configuration properties of the target assets;
• scanning the target assets for security vulnerabilities;
• generating an initial list of security vulnerabilities found by the scanning and generating an initial list of patches including remediation actions to resolve the security vulnerabilities;
• predicting, by a prediction model, which patches from the initial list of patches are applicable to the target assets based on at least the remediation actions and removing unapplicable patches from the initial list of patches to generate a predicted list of patches;
• wherein the prediction model is trained to identify applicable patches based at least in part on a history of patch iterations performed on the target assets;
• generating an interactive graphical user interface based on the predicted list of patches for display on a display device, wherein each displayed patch from the predicted list includes an approve option and a reject option that are selectable by a user;
• in response to selections made on the interactive graphical user interface, generating an approved list of patches which have the approve option selected;
• generating an electronic change request that requests to install the approved list of patches in the computing environment at a scheduled time period;
• generating and displaying a change request graphical user interface on a remote device that includes one or more patches from the approved list of patches that are selectable for final approval;
• and
• in response to one or more patches of the approved list of patches being selected for final approval from the change request graphical user interface, installing the one or more patches into the computing environment at the scheduled time period.

A computing system, comprising:

• at least one processor connected to at least one memory;
• a non-transitory computer readable medium including instructions stored thereon that when executed by at least the processor cause the processor to:
• identify, by the processor, an IP address range within a computing environment, wherein the IP address range is used to identify a set of target assets within the computing environment;
• obtain metadata associated with the target assets that identifies configuration properties of the target assets;
• select a subset of scanning modules from an available set of scanning modules based at least in part on the configuration properties of the target assets, wherein the set of scanning modules selected are configured to scan for security vulnerabilities associated with the configuration properties of the target assets;
• scan the target assets for security vulnerabilities by executing the subset of scanning modules;
• generate an initial list of security vulnerabilities found by the subset of scanning modules and generate an initial list of patches including remediation actions to resolve the security vulnerabilities;
• generate a severity score for each of the security vulnerabilities in the initial list based at least in part on a potential damage caused by the security vulnerability in accordance with the configuration properties from the metadata of the target assets;
• input the remediation actions and the metadata of the target assets to a prediction model that is configured to determine whether the remediation actions of an associated patch are applicable to the target assets based at least in part on a history of patch iterations performed on the target assets;
• remove unapplicable patches determined by the predictive model from the initial list of patches to generate a predicted list of patches;
• generate an interactive graphical user interface based on the predicted list of patches for display on a display device, wherein each displayed patch from the predicted list includes an approve option and a reject option that are selectable by a user;
• in response to selections made on the interactive graphical user interface, generate an approved list of patches which have the approve option selected;
• generate an electronic change request that requests to install the approved list of patches in a production environment on the target assets at a scheduled time period;
• generate and display, on a display device, a change request graphical user interface on a remote device that includes one or more patches from the approved list of patches that are selectable for final approval;
• and
• in response to one or more patches of the approved list of patches being selected for final approval from the electronic change request,
• in response to one or more patches of the approved list of patches being selected for final approval from the change request graphical user interface, install the one or more patches into the computing environment at the scheduled time period.