Vulnerable software exposure assessment

A system comprising:

• one or more processors;
• and
• at least one computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to, while maintaining, via a software asset management (SAM) system, a database of software assets associated with an enterprise:
• identify a vulnerable software asset;
• obtain a descriptor of the vulnerable software asset;
• map the descriptor of the vulnerable software asset to a portion of the database of software assets;
• and
• determine a likelihood that the vulnerable software asset is associated with the enterprise based on the mapping.

A non-transitory computer-readable storage medium storing instructions for causing one or more processors to, while maintaining, via a software asset management (SAM) system, a database of software assets associated with an enterprise:

• identify a vulnerable software asset;
• obtain a descriptor of the vulnerable software asset;
• map the descriptor of the vulnerable software asset to a portion of the database of software assets;
• and
• determine a likelihood that the vulnerable software asset is associated with the enterprise based on the mapping.