Technology Catalog Layering for Automated Stack Vulnerability Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face challenges in maintaining up-to-date awareness of their technology stacks due to the large number of technologies and products employed, leading to increased vulnerability to cyber-threats and difficulty in identifying and mitigating product vulnerabilities.
Innovation Solution
A method and system for populating a multi-layer technology product catalog by scanning environments, identifying technology products, determining descriptors, classifying them into layers, and saving the catalog in a database, enabling automatic identification and monitoring of vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If manual cataloging of technology products is performed, then operators can maintain awareness of the technology stack, but the process becomes difficult and time-consuming due to the large number of technologies employed
Solution Approach 1:
The system enables self-service by automatically scanning executing environments to collect hints about technology products, mapping these hints to identifiers, and populating the catalog without requiring manual operator intervention for each technology addition or removal
Solution Approach 2:
The system performs preliminary actions by continuously scanning environments and automatically updating the catalog before operators would need to manually review changes, ensuring the catalog is always current without waiting for manual updates
2Adaptability or versatility
If manual generation of technology stack is performed, then departments can use different technologies for different projects, but communication between departments and stack administrators limits the ability to generate complete stacks
Solution Approach 1:
The system segments the technology stack into discrete identifiable products with unique identifiers, allowing different departments to use different technologies while the system automatically tracks and catalogs each segment independently through environment scanning and hint collection
Solution Approach 2:
The automated catalog system acts as an intermediary between departments using different technologies and the central stack administrators, automatically collecting technology information from various departments and consolidating it into a unified catalog without requiring direct communication between all parties
3Reliability
If manual compilation of technology stack is performed, then operators can review products, but automatic identification of product vulnerabilities is not provided, increasing susceptibility to cyber-threats
Solution Approach 1:
The system replaces the mechanical manual review process with automated electronic scanning and analysis, where the system automatically scans executing environments, collects technology hints, maps identifiers, and identifies vulnerabilities without requiring manual operator review of each product
Data Source
AI summary
A method and system for populating multi-layer technology product catalogs are provided. The method includes scanning an environment executing a software project to collect hints on technology products required for the execution of the software project; mapping the collected hints to identifiers of technology products to identify technology products required for the execution of the software project; analyzing each of the identified technology products to determine a set of descriptors identifying certain attributes of a technology product; classifying each of the identified technology products to at least one technology layer, wherein a technology layer represents the functionality of a technology product; populating a technology product catalog to including a plurality of entries, wherein each entry is associated with a single technology product and marinates the set of descriptors and the least one technology layer associated with the technology product; and saving the populated technology product catalog in a database.