Enabling access to aggregated software security information

• US 20080065646A1
• Filed: 06/20/2007
• Published: 03/13/2008
• Est. Priority Date: 09/08/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Zhang, Dongmei, Hou, Xiaohui, Dang, Yingnong, Huang, Song, Wang, Jian
• Granted Patent: US 8,234,706 B2
• Time in Patent Office: Days
• US Class Current: 707/10
• CPC Class Codes: G06Q 10/00 Administration; Management

Abstract

A method for enabling access to software security data is provided. The method includes accessing data associated with software vulnerabilities from a plurality of on-line sources. The method further includes aggregating the data from the plurality of on-line sources and identifying attributes associated with the data. The method also includes enabling access to the aggregated data through a graphical user interface that can be used to analyze the data according to the attributes.

Claims

1. A method for enabling access to security data comprising:

accessing data associated with software security from a plurality of on-line sources;

aggregating said data from said plurality of on-line sources;

identifying attributes associated with said data; and

enabling access to said aggregated data through a graphical user interface that can be used to analyze said data according to said attributes.

2. The method of claim 1 further comprising:

determining a relationship between a first portion of said data and a second portion of said data based on said attributes; and

presenting said relationship graphically on said user interface.

3. The method of claim 1 further comprising:

determining a trend associated with a first portion of said data based on said attributes; and

presenting said trend graphically on said user interface.

4. The method of claim 1 further comprising:

accessing a key word associated with said data; and

presenting graphically analysis of said data according to said key word.

5. The method of claim 1 further comprising:

accessing a message posting associated with said data; and

presenting graphically a relationship between said message posting and said data.

6. The method of claim 1 further comprising:

ranking said data according to a determined importance; and

presenting graphically said ranking according to said importance.

7. The method of claim 1 further including:

organizing a portion of said data according to a plurality of information levels wherein each of said information levels are hierarchically related.

8. Instructions on a computer-usable medium wherein said instructions when executed cause a computer system to perform a method for enabling access to aggregated software security data, said computer-implemented method comprising:

accessing data associated with software security from a plurality of on-line sources;

aggregating said data from said plurality of on-line sources;

identifying attributes associated with said data; and

enabling access to said aggregated data through a graphical user interface that can be used to analyze said data according to said attributes.

9. The instructions of claim 8 wherein said method further comprises:

determining a relationship between a first portion of said data and a second portion of said data; and

presenting said relationship on said graphical user interface.

10. The instructions of claim 8 wherein said method further comprises:

determining a trend associated with a first portion of said data; and

presenting said trend graphically on said user interface.

11. The instructions of claim 8 further comprising:

accessing a key word associated with said data; and

presenting graphically analysis of said data according to said key word.

12. The instructions of claim 8 further comprising:

accessing a message posting associated with said data; and

presenting graphically a relationship between said message posting and said data.

13. The instructions of claim 8 further comprising:

determining a trust level associated with a portion of said data; and

presenting graphically said trust level associated with said portion of said data.

14. The instructions of claim 8 wherein said method further comprises:

organizing a portion of said data according to a plurality of information levels wherein each of said information levels are hierarchically related.

15. A system for enabling access to software security data comprising:

a software security data collector module for accessing data associated with software security from a plurality of on-line sources;

a software security data compiler for aggregating said data from said plurality of on-line sources;

a software security data attribute identifier module for identifying attributes associated with said data; and

a graphical user interface for enabling access to said aggregated data wherein said graphical user interface can be used to analyze said data according to said attributes.

16. The system of claim 15 further comprising:

a data relationship determiner module for determining a relationship between a first portion of said data and a second portion of said data based on said attributes wherein said relationship can be presented on said graphical user interface.

17. The system of claim 15 further comprising:

a trend determiner module for determining a trend associated with a first portion of said data based on said attributes wherein said trend can be presented on said user interface.

18. The system of claim 15 further comprising:

a keyword accessor module for accessing a key word associated with said data wherein analysis of said data based on said keyword can be presented on said graphical user interface.

19. The system of claim 15 further comprising:

a message accessor module for accessing a message posting associated with said data wherein a relationship between said message posting and said data can be presented on said graphical user interface.

20. The system of claim 15 further comprising:

a data ranking module for ranking said data according to a determined importance wherein said ranking according to said importance can be presented on said graphical user interface.