Automated vulnerability integration, prioritization, and verification in autonomous pentesting

An apparatus for integrating emerging vulnerabilities with autonomous pentesting, comprising:

• one or more memories storing processor-executable code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:
• perform one or more first autonomous pentesting operations, the one or more first autonomous pentesting operations comprising collecting and storing network asset data of one or more networks;
• receive an indication of an emerging vulnerability applicable to an application or a service;
• identify one or more network devices of the one or more networks associated with the application or the service based at least in part on the stored network asset data and receiving the indication of the emerging vulnerability;
• generate one or more confidence scores associated with an accuracy of identifying of the one or more network devices based at least in part on a comparison between one or more first attributes of the application or the service associated with the one or more network devices and one or more second attributes of the emerging vulnerability;
• and
• selectively perform, in accordance with the one or more confidence scores, one or more second autonomous pentesting operations targeting the one or more network devices.

A non-transitory computer-readable medium storing code for integrating emerging vulnerabilities with autonomous pentesting, the code comprising instructions executable by one or more processors to:

• perform one or more first autonomous pentesting operations, the one or more first autonomous pentesting operations comprising collecting and storing network asset data of one or more networks;
• receive an indication of an emerging vulnerability applicable to an application or a service;
• identify one or more network devices of the one or more networks associated with the application or the service based at least in part on the stored network asset data and receiving the indication of the emerging vulnerability;
• generate one or more confidence scores associated with an accuracy of identifying of the one or more network devices based at least in part on a comparison between one or more first attributes of the application or the service associated with the one or more network devices and one or more second attributes of the emerging vulnerability;
• and
• selectively perform, in accordance with the one or more confidence scores, one or more second autonomous pentesting operations targeting the one or more network devices.