System and method for multi-source vulnerability management

By unifying multi-source vulnerability information and processing cloud-specific contextual data, the dilution and noise problems in vulnerability management in the cloud environment are solved, enabling efficient and accurate vulnerability identification and remediation, and providing cloud-specific vulnerability evaluation and automated remediation measures.

CN114127720BActive Publication Date: 2025-12-30F5 NETWORKS INC
2 Cites 0 Cited by

Patent Information

Application Number
CN202080051631.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Priority Date
2019-07-19
Filing Date
2020-07-08
Publication Date
2025-12-30
Estimated Expiration
2040-07-08

AI Technical Summary

Technical Problem

In existing cloud environments, vulnerability management systems struggle to quickly and effectively identify and remediate vulnerabilities in diverse and rapidly changing cloud-based infrastructures. Furthermore, traditional methods lack cloud-specific contextual information, resulting in diluted vulnerability information and significant noise, making it difficult to provide specific and accurate vulnerability assessments.

Method used

By collecting vulnerability information from multiple sources, including the National Vulnerability Database (NVD), CentOS Errata, Security Advisories (CESA), and Amazon Linux Advisories (ALAS), and combining it with contextual data from cloud providers, a cloud-specific, unified vulnerability view is generated. This provides specific vulnerability assessments related to the user's system and enables real-time monitoring and remediation through software agents and processors.

Benefits of technology

It reduces noise and dilution of vulnerability information in cloud environments, provides more accurate and specific vulnerability assessments, supports automated remediation measures, reduces false positive rates, and improves the efficiency and accuracy of vulnerability management.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

A method for multi-source cloud infrastructure vulnerability management includes receiving cloud element information related to a cloud-based element in a cloud environment. The method also includes receiving first vulnerability information from a first vulnerability source and receiving second vulnerability information from a second vulnerability source. Cloud element context information is also received from the cloud environment regarding the cloud-based element. A multi-source vulnerability database is then generated from both the first vulnerability information and from the second vulnerability information. The cloud element information and the cloud element context information are then evaluated using the multi-source vulnerability database to generate a vulnerability assessment.
Need to check novelty before this filing date? Find Prior Art