Methods and systems for network vulnerability evaluation and mitigation

A system, comprising:

• a non-transitory memory configured to store historical data describing prior detected vulnerabilities across a communication network, wherein the historical data comprises historical ownership data, historical deployment data, historical environment data, historical network impact data, and historical mitigation data associated with each of the prior detected vulnerabilities;
• a processor communicatively coupled to the memory;
• and
• an application stored at the memory, which when executed by the processor, causes the processor to be configured to:
• train a data model system using the historical data to identify a vulnerability associated with a software asset in the communication network, determine a network impact of the vulnerability in the communication network, and a mitigation action for the vulnerability;
• identify, using a vulnerability application executing at the data model system, the vulnerability at the software asset in the communication network;
• determine, using a network impact application executing at the data model system, a network impact of the vulnerability across different elements in the communication network, wherein the different elements are located in at least one of a platform, an environment, or an interconnected system associated with the software asset;
• and
• determine, using a mitigation application executing at the data model system, a mitigation action to perform at the software asset and at each of the different elements to reduce or eliminate a risk of the vulnerability associated with the software asset at the software asset and at each of the different elements, wherein the mitigation action comprises at least one of patching, reconfiguring, isolating, or restricting access to at least one of the software asset or the different elements.

A method comprising:

• training, by an application executing at a database system in a communication network, one or more applications executing at a data model system using historical data describing prior detected vulnerabilities across the communication network;
• determining, by the application using the one or more applications executing at the data model system, a vulnerability associated with a software asset in the communication network, a network impact of the vulnerability across different elements of the communication network, and a mitigation action for each of the different elements to mitigate the vulnerability associated with the software asset across the different elements;
• and
• initiating, by the application, automation of the mitigation action at the software asset and at each of the different elements to mitigate the vulnerability associated with the software asset in the communication network.