System and method for selecting and applying filters for intrusion protection system within a vulnerability management system

A system for controlling selection of filters for protecting against vulnerabilities of a computer network, comprising:

• a vulnerability management system adapted to analyze the computer network and to determine network vulnerabilities for the computer network, wherein the vulnerability management system is configured to receive real-time data on a status of filters protecting against vulnerabilities of the computer network, wherein a filter comprises program code adapted to be implemented within an intrusion protection system to identify and prevent a particular type of attack from penetrating the computer network, the intrusion protection system being distinct from the vulnerability management system;
• and
• a database that contains a pre-generated mapping of network vulnerabilities to filters for protecting against the network vulnerabilities;
• the vulnerability management system outputting one or more recommended actions for selection of filters for the intrusion protection system based upon the determined network vulnerabilities of the computer network, the pre-generated mapping of network vulnerabilities to the filters for protecting against the network vulnerabilities, and the real-time data on the status of the filters.