Identifying data associated with security issue attributes

A computer storage device having instructions which when executed cause a computer system to perform steps comprising:

• determining one or more attributes associated with a software security issue of a software product, said software security issue including a vulnerability of said software product;
• analyzing aggregated software security data, which is aggregated from a plurality of on-line sources, for said one or more attributes;
• associating a first portion of said aggregated data with said software security issue based on matching said one or more attributes with contents of said first portion of said aggregated data based on said analyzing;
• identifying a seed document from said first portion of said aggregated data based on the seed document being received from a data store provided by a vendor of the software product;
• and
• determining a similarity between said seed document and one or more other documents included in a second portion of said aggregated data.

A system for identifying data associated with a software security issue comprising:

• one or more processors;
• an attribute determiner module, implemented using at least one of the one or more processors, for determining one or more attributes associated with said software security issue of a software product, said software security issue including a vulnerability of said software product;
• a data accessor module, implemented using at least one of the one or more processors, for accessing aggregated software security data that is aggregated from a plurality of on-line sources;
• a search module, implemented using at least one of the one or more processors, for analyzing said aggregated software security data for said one or more attributes;
• and
• an associator module, implemented using at least one of the one or more processors, that associates a portion of said aggregated data with said software security issue based on matching said one or more attributes with contents of said portion of said aggregated data, that identifies a seed document from said portion of said aggregated data based on the seed document being received from a data store provided by a vendor of the software product, and that determines a similarity between said seed document and one or more other documents included in another portion of said aggregated data.