Security Vulnerability Monitor

• US 20090024990A1
• Filed: 09/30/2008
• Published: 01/22/2009
• Est. Priority Date: 07/01/2003
• Status: Abandoned Application

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Singh, Navjot, Tsai, Timothy Kohchih
• Application Number:
  US12/241,595
• Publication Number:
  US 20090024990A1
• Time in Patent Office: Days
• US Class Current: 717/168
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security

Abstract

A method and apparatus for automatically determining whether a security vulnerability alert is relevant to a device (e.g., personal computer, server, personal digital assistant [PDA], etc.), and automatically retrieving the associated software patches for relevant alerts, are disclosed. The illustrative embodiment intelligently determines whether the software application specified by a security vulnerability alert is resident on the device, whether the version of the software application on the device matches that of the security vulnerability alert, and whether the device'"'"'s hardware platform and operating system match those of the security vulnerability alert.

Claims

1. A method comprising:

(a) ascertaining what software applications are resident on a device; and

(b) querying a database for security vulnerability alerts for said software applications.

2. The method of claim 1 further comprising installing a software patch when (b) returns a security vulnerability alert.

3. The method of claim 2 further comprising retrieving said software patch.

4. The method of claim 1 wherein (a) comprises consulting a software installation manager for said device.

5. The method of claim 1 wherein (a) comprises consulting a registry for said device.

6. The method of claim 1 wherein (a) comprises searching a file system of said device.