Risk scoring system for vulnerability mitigation

One or more non-transitory computer readable storage media storing computer readable instructions, which when executed by a computer cause the computer to:

• produce a risk score based at least in part on a vulnerability component for an object within the computing environment, wherein the vulnerability component comprises at least an age component, wherein the risk score follows a model of:
• from a minimum value for the age component, increasing to a local maxima as the age component reaches a first predetermined age,
• decreasing to a local minima as the age component approaches a second predetermined age from the first predetermined age, the second predetermined age being greater than the first predetermined age, and
• increasing as the age component increases past the second predetermined age;
• produce a signal score indicating a factor that contributes to risk for the object;
• and
• wherein the risk score indicates a risk level associated with at least one vulnerability of the computing system object.

An apparatus, comprising:

• a processor;
• and
• one or more non-transitory computer readable storage media storing computer readable instructions, which when executed by the processor cause the apparatus to:
• produce a risk score based at least in part on a vulnerability component for an object within the computing environment, wherein the vulnerability component comprises at least an age component, wherein the risk score follows a model of:
• from a minimum value for the age component, increasing to a local maxima as the age component reaches a first predetermined age,
• decreasing to a local minima as the age component approaches a second predetermined age from the first predetermined age, the second predetermined age being greater than the first predetermined age, and
• increasing as the age component increases past the second predetermined age;
• produce a signal score indicating a factor that contributes to risk for the object;
• and
• wherein the risk score indicates a risk level associated with at least one vulnerability of the computing system object.