Clustering compliance activities and security vulnerability remediations
AssigneeCapital One Services, LLC
InventorsGrant Michael IWAN, Mohamed SECK, Shannon REID
Life of this patent
Estimating the term…
Loading patent…
AssigneeCapital One Services, LLC
InventorsGrant Michael IWAN, Mohamed SECK, Shannon REID
Estimating the term…
In some implementations, a compliance system may receive, from a tracking system, a set of data structures representing a set of security vulnerabilities and indicating a corresponding set of severity levels. The compliance system may determine a set of levels of effort, corresponding to remediating the set of security vulnerabilities. The compliance system may provide the set of levels of effort to a machine learning model, in order to generate a proposed change to a set of users that are responsible for remediation, and may output an indication of the proposed change. The compliance system may provide the corresponding set of severity levels and the set of levels of effort to the machine learning model in order to generate clusters for the set of security vulnerabilities. The compliance system may output, based on the clusters, an indication of which users are assigned to which security vulnerabilities.
A system for clustering compliance activities, the system comprising:
A method of clustering security vulnerabilities, comprising:
The method of claim Error! Reference source not found, further comprising:
The method of claim Error! Reference source not found, wherein the set of levels of effort comprise a set of amounts of time.
The method of claim Error! Reference source not found, further comprising:
The method of claim Error! Reference source not found, further comprising:
The method of claim Error! Reference source not found, wherein the indication of the proposed change indicates a difference between expected man hours and actual man hours associated with remediating the set of security vulnerabilities.
A non-transitory computer-readable medium storing a set of instructions for clustering compliance activities, the set of instructions comprising:
The non-transitory computer-readable medium of claim Error! Reference source not found, wherein the one or more instructions, when executed by the one or more processors, further cause the device to:
The non-transitory computer-readable medium of claim Error! Reference source not found, wherein the one or more instructions, when executed by the one or more processors, further cause the device to:
The non-transitory computer-readable medium of claim Error! Reference source not found, wherein the one or more instructions, when executed by the one or more processors, further cause the device to:
The non-transitory computer-readable medium of claim Error! Reference source not found, wherein the one or more instructions, that cause the device to determine the set of levels of effort, cause the device to:
The non-transitory computer-readable medium of claim Error! Reference source not found, wherein the set of levels of effort comprise a set of amounts of time.
The non-transitory computer-readable medium of claim Error! Reference source not found, wherein the indication of the proposed change indicates a difference between expected man hours and actual man hours associated with the set of compliance activities.
Dependencies are inferred from the claim text.