Invention Grant
- Patent Title: Cybersecurity vulnerability classification and remediation based on installation base
-
Application No.: US16525899Application Date: 2019-07-30
-
Publication No.: US11381588B2Publication Date: 2022-07-05
- Inventor: Sultan Saadaldean Alsharif , Wael Mohammed Alagi
- Applicant: Saudi Arabian Oil Company
- Applicant Address: SA Dhahran
- Assignee: Saudi Arabian Oil Company
- Current Assignee: Saudi Arabian Oil Company
- Current Assignee Address: SA Dhahran
- Agency: Leason Ellis LLP
- Main IPC: H04L9/40
- IPC: H04L9/40 ; G06F17/16 ; G06F21/55

Abstract:
A system, a method, and a computer program for remediating a cyberattack risk for a computing resource located at a node in a computer network having a plurality of nodes. The solution includes receiving vulnerability score data that has a severity level for a vulnerability in the computing resource at the node, receiving a number of installations value (NCRi) that indicates a number of instances the computing resource is included in the plurality of nodes, determining a percentile of occurrence value (POCRi) for the computing resource based on the number of installations value (NCRi), applying a severity adjustment matrix to the severity level to determine a true severity level for the vulnerability in the computing resource, reprioritized the vulnerability in the computing resource based on the true severity level, and mitigating the cyberattack risk for the computing resource based on the true severity level.
Public/Granted literature
- US20210037038A1 CYBERSECURITY VULNERABILITY CLASSIFICATION AND REMEDIATION BASED ON INSTALLATION BASE Public/Granted day:2021-02-04
Information query