Systems and Methods for Vulnerability Detection and Scoring with Threat Assessment

• US 20080028470A1
• Filed: 07/25/2007
• Published: 01/31/2008
• Est. Priority Date: 07/25/2006
• Status: Abandoned Application

• Current Assignee: Jorge Monasterio, Mark Remington, Michael Paul Bringle, Paul Pyryemybida
• Original Assignee: Jorge Monasterio, Mark Remington, Michael Paul Bringle, Paul Pyryemybida
• Inventors: Pyryemybida, Paul, Remington, Mark, Bringle, Michael Paul, Monasterio, Jorge
• Application Number:
  US11/828,179
• Publication Number:
  US 20080028470A1
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy

Abstract

Certain embodiments of the present invention provide a system for vulnerability detection and scoring with threat assessment including an analysis engine adapted to perform at least one of automated and semi-automated analysis of a computing system of at least one of known threats, vulnerabilities, and risk factors. The analysis engine is further adapted to determine a security score for the computing system based on the analysis and a schedule indicating a severity level for each threat, vulnerability, and risk factor.

Claims

1. A system for vulnerability detection and scoring with threat assessment, the system including:

an analysis engine adapted to perform at least one of automated and semi-automated analysis of a computing system of at least one of known threats, vulnerabilities, and risk factors, wherein the analysis engine is further adapted to determine a security score for the computing system based on the analysis and a schedule indicating a severity level for each threat, vulnerability, and risk factor.

2. The system of claim 1, wherein the security score is displayed to a user.

3. The system of claim 1, wherein the security score is communicated to a party other than a user.

4. The system of claim 1, wherein the security score is communicated to a Network Admissions Control system that decides whether to permit or deny communications using a data network from the computing system.

5. The system of claim 1, wherein the analysis engine is integrated with a system for detecting or preventing electronic intrusions or the exploitation of security vulnerabilities.

6. The system of claim 1, wherein the analysis engine is integrated with a system for detecting or preventing data structure anomalies or the exploitation of security vulnerabilities.

7. The system of claim 1, wherein the analysis engine is integrated with a system for detecting or preventing exploitation of security vulnerabilities on the computing system.

8. The system of claim 5, wherein at least one of the known threats, vulnerabilities, and risk factors analyzed by the analysis engine is explicitly detected or prevented by using the system.

9. The system of claim 6, wherein at least one of the known threats, vulnerabilities, and risk factors analyzed by the analysis engine is explicitly detected or prevented by using the system.

10. The system of claim 7, wherein at least one of the known threats, vulnerabilities, and risk factors analyzed by the analysis engine is explicitly detected or prevented by using the system.

11. A system for vulnerability detection and scoring with threat assessment, the system including:

a set of assessment rules, wherein the assessment rules include a schedule indicating a severity level for each threat, vulnerability, and risk factor; and

an analysis engine adapted to perform a risk assessment of a computing system to determine a security score for a computing system based at least in part on the set of assessment rules.

12. The system of claim 11, wherein the risk assessment is performed automatically.

13. The system of claim 11, wherein the security score is communicated to a network control system.

14. The system of claim 13, wherein access to a network is determined based on the determined security score.

15. The system of claim 13, wherein access to a service is determined based on the determined security score.

16. The system of claim 11, wherein the security score is presented to a user.

17. The system of claim 11, wherein the analysis engine is further adapted to determine a detailed report based on the risk assessment.

18. The system of claim 17, wherein the detailed report is presented to a user.

19. The system of claim 11, wherein the risk assessment includes analysis of known threats, vulnerabilities, and risk factors.

20. A computer-readable medium including a set of instructions for execution on a computer, the set of instructions including:

a risk assessment routine configured to analyze a computing system to evaluate one or more known threats, vulnerabilities, and risk factors;

a security score determination routine configured to determine a security score for the computing system based on the results of the analysis; and

a user interface routine configured to present the security score to a user.