SOFTWARE VULNERABILITY NOTIFICATION VIA ICON DECORATIONS

• US 20140344936A1
• Filed: 05/14/2013
• Published: 11/20/2014
• Est. Priority Date: 05/14/2013
• Status: Active Grant

• Current Assignee: Globalfoundries US Incorporated (GlobalFoundries, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Thario, James E.
• Granted Patent: US 8,973,134 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34

Abstract

A computer identifies computer software applications installed on a computer. The computer sends an electronic request to a program on a server computer that extracts information about the computer software applications identified having a vulnerability. The computer receives the information that is extracted. The computer generates an icon decoration for the vulnerability, wherein the icon decoration readily displays the level of risk associated to the vulnerability and information about a security update for the vulnerability. The computer adds the icon decoration onto each icon of the one of the computer software applications identified and each icon of electronic documents associated to the one of the computer software applications identified.

Claims

1. A method for generating an icon decoration that readily notifies an end-user about a vulnerability associated to a computer software application, the method comprising the steps of:

identifying computer software applications installed on a computer;

sending an electronic request to a program on a server computer that extracts information, from a database, about the computer software applications identified, wherein the information includes at least a vulnerability of one of the computer software applications identified, a level of risk associated to the vulnerability, and information about at least one of a security patch for the one of the computer software applications identified and instructions to configure the one of the computer software applications identified in order to minimize the level of security risk associated to the vulnerability;

receiving the information that is extracted from the database;

generating an icon decoration for the vulnerability, wherein the icon decoration readily displays the information that is extracted; and

adding the icon decoration onto each icon of the one of the computer software applications identified and each icon of electronic documents associated to the one of the computer software applications identified.

2. The method of claim 1, wherein the step of identifying the computer software applications comprises a search of a computer file system of the computer, based on a configurable schedule that defines instructions to run the search of the computer file system on at least one of an hourly and a daily basis.

3. The method of claim 1, wherein the electronic request comprises a name parameter for the one of the computer software applications identified, and a unique identifier parameter associated to the name that are utilized by the program on the server computer to generate a query that extracts the information.

4. The method of claim 1, the step of generating the icon decoration for the vulnerability comprises selecting an image of the icon decoration based on the level of risk associated to the vulnerability.

5. The method of claim 1, wherein the icon decoration is customizable by the end-user to have an image with various shapes and colors that readily notify the end-user about the level of computer security risks associated to a vulnerability.

6. The method of claim 5, wherein the image includes a biohazard symbol, a radioactive symbol, or a warning arrow.

7. A computer program product for generating an icon decoration that readily notifies an end-user about a vulnerability associated to a computer software application, the computer program product comprising:

a computer readable tangible storage device and program instructions stored on the computer readable tangible storage device, the program instructions include;

program instructions to identifying computer software applications installed on a computer;

program instructions to send an electronic request to a program on a server computer that extracts information, from a database, about the computer software applications identified, wherein the information includes at least a vulnerability of one of the computer software applications identified, a level of risk associated to the vulnerability, and information about at least one of a security patch for the one of the computer software applications identified and instructions to configure the one of the computer software applications identified in order to minimize the level of security risk associated to the vulnerability;

program instructions to receive the information that is extracted from the database;

program instructions to generate an icon decoration for the vulnerability, wherein the icon decoration readily displays the information that is extracted; and

program instructions to add the icon decoration onto each icon of the one of the computer software applications identified and each icon of electronic documents associated to the one of the computer software applications identified.

8. The computer program product of claim 7, wherein the step of identifying the computer software applications comprises a search of a computer file system of the computer, based on a configurable schedule that defines instructions to run the search of the computer file system on at least one of an hourly and a daily basis.

9. The computer program product of claim 7, wherein the electronic request comprises a name parameter for the one of the computer software applications identified, and a unique identifier parameter associated to the name that are utilized by the program on the server computer to generate a query that extracts the information.

10. The computer program product of claim 7, the step of generating the icon decoration for the vulnerability comprises selecting an image of the icon decoration based on the level of risk associated to the vulnerability.

11. The computer program product of claim 7, wherein the icon decoration is customizable by the end-user to have an image with various shapes and colors that readily notify the end-user about the level of computer security risks associated to a vulnerability.

12. The computer program product of claim 11, wherein the image includes a biohazard symbol, a radioactive symbol, or a warning arrow.

13. A computer system for generating an icon decoration that readily notifies an end-user about a vulnerability associated to a computer software application, the computer system comprising:

one or more processors, one or more computer readable memories, one or more computer readable storage media, and program instructions stored on the one or more storage media for execution by the one or more processors via the one or more memories, the program instructions comprising;

program instructions to identifying computer software applications installed on a computer;

program instructions to send an electronic request to a program on a server computer that extracts information, from a database, about the computer software applications identified, wherein the information includes at least a vulnerability of one of the computer software applications identified, a level of risk associated to the vulnerability, and information about at least one of a security patch for the one of the computer software applications identified and instructions to configure the one of the computer software applications identified in order to minimize the level of security risk associated to the vulnerability;

program instructions to receive the information that is extracted from the database;

program instructions to generate an icon decoration for the vulnerability, wherein the icon decoration readily displays the information that is extracted; and

program instructions to add the icon decoration onto each icon of the one of the computer software applications identified and each icon of electronic documents associated to the one of the computer software applications identified.

14. The computer system of claim 13, wherein the step of identifying the computer software applications comprises a search of a computer file system of the computer, based on a configurable schedule that defines instructions to run the search of the computer file system on at least one of an hourly and a daily basis.

15. The computer system of claim 13, wherein the electronic request comprises a name parameter for the one of the computer software applications identified, and a unique identifier parameter associated to the name that are utilized by the program on the server computer to generate a query that extracts the information.

16. The computer system of claim 13, the step of generating the icon decoration for the vulnerability comprises selecting an image of the icon decoration based on the level of risk associated to the vulnerability.

17. The computer system of claim 13, wherein the icon decoration is customizable by the end-user to have an image with various shapes and colors that readily notify the end-user about the level of computer security risks associated to a vulnerability.

18. The computer system of claim 17, wherein the image includes a biohazard symbol, a radioactive symbol, or a warning arrow.