Computer network security platform
AssigneeNoblis, Inc.
InventorJohn R. Maguire
Life of this patent
Estimating the term…
Abstract
A computer system for managing security information for an organization includes a scanner execution module configured to automatically execute at least two scanners in a predetermined interval to analyze potential vulnerabilities of a computer environment. A vulnerability is acquired from the at least two scanners and stored in a data store. A user associated with the analyzed computer environment is determined based on the vulnerability stored in the data store, the user is notified of the vulnerability.
Claims18
A computer system for managing security information for an organization, comprising:
- one or more memories storing instructions;
- and
- one or more processors configured to execute the instructions to perform:
- receiving scan data from at least two scanners to analyze potential vulnerabilities of a computer environment associated with the organization;
- detecting one or more vulnerabilities from the scan data;
- correlating the scan data received from the at least two scanners to determine whether information included in the scan data relates to the same vulnerability;
- determining that at least one of the detected vulnerabilities is an excluded vulnerability based on a risk rating of the at least one of the detected vulnerabilities;
- determining a user associated with the analyzed computer environment based on the one or more detected vulnerabilities;
- and
- generating a report that includes the one or more detected vulnerabilities but not the excluded vulnerability.
A computer-implemented method for managing computer security, comprising:
- receiving scan data from at least two scanners to analyze potential vulnerabilities of a computer environment associated with an organization;
- detecting one or more vulnerabilities from the scan data;
- correlating the scan data received from the at least two scanners to determine whether information included in the scan data relates to the same vulnerability;
- determining that at least one of the detected vulnerabilities is an excluded vulnerability based on a risk rating of the at least one of the detected vulnerabilities;
- determining a user associated with the analyzed computer environment based on the one or more detected vulnerabilities;
- and
- generating a report that includes the one or more detected vulnerabilities but not the excluded vulnerability.
A computer system for managing security information for an organization, comprising:
- one or more memories storing instructions;
- and
- one or more processors configured to execute the instructions to perform:
- authenticating a user associated with the organization;
- assigning a security responsibility to the user;
- specifying preferences for the user;
- receiving scan data from at least two scanners to analyze security issues of a computer environment associated with the organization;
- detecting one or more vulnerabilities from the scan data;
- correlating the scan data received from the at least two scanners to determine whether information included in the scan data relates to the same vulnerability;
- determining that at least one of the detected vulnerabilities is an excluded vulnerability based on a risk rating of the at least one of the detected vulnerabilities;
- determining a user of a security issue based on the one or more detected vulnerabilities;
- and
- generating a report on the security issue that includes the one or more detected vulnerabilities but not the excluded vulnerability.
Dependencies are inferred from the claim text.