Invention Grant
- Patent Title: Systems and methods of associating security vulnerabilities and assets
- Patent Title (中): 关联安全漏洞和资产的系统和方法
-
Application No.: US11366100Application Date: 2006-03-02
-
Publication No.: US08095984B2Publication Date: 2012-01-10
- Inventor: Bradley Kenneth McFarlane , Douglas Wiemer , Kevin McNamee
- Applicant: Bradley Kenneth McFarlane , Douglas Wiemer , Kevin McNamee
- Applicant Address: FR Paris
- Assignee: Alcatel Lucent
- Current Assignee: Alcatel Lucent
- Current Assignee Address: FR Paris
- Agency: Eckert Seamans Cherin & Mellott, LLC
- Main IPC: G06F12/16
- IPC: G06F12/16 ; G06F11/00 ; G06F15/173 ; H04L29/06 ; H04K1/00

Abstract:
Systems and methods of associating security vulnerabilities and assets, and related Graphical User Interfaces (GUIs) and data structures, are disclosed. A definition of a security vulnerability, which includes multiple asset characteristics such as an asset platform that may be exploited via the security vulnerability and an asset platform that is affected when the exploited asset platform is exploited via the security vulnerability, is compared with definitions of one or more assets of an information system. An association between the security vulnerability and an asset is made if the definition of the asset includes a first asset characteristic of the security vulnerability definition and either the definition of the asset or the definition of another asset that has a relationship with the asset includes a second asset characteristic of the security vulnerability definition. The security vulnerability definition may also identify an asset platform that protects against the vulnerability.
Public/Granted literature
- US20070067846A1 Systems and methods of associating security vulnerabilities and assets Public/Granted day:2007-03-22
Information query