Cloud Cybersecurity Portal for Vulnerability Data Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional cybersecurity assessment systems are inefficient and costly, requiring on-site installation of software and hardware, producing large and difficult-to-consume scan data reports, and lacking real-time event alerting and remediation recommendations, making it challenging for enterprises to monitor and address cybersecurity status effectively.

Innovation Solution

A cloud-based cybersecurity assessment system that remotely scans networks, processes vulnerability data to generate efficient representations, and provides interactive interfaces for real-time cybersecurity status assessment and remediation recommendations, without the need for on-site installation of hardware or software.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional cybersecurity assessment systems are used with on-site installation of software and hardware, then comprehensive vulnerability scanning can be performed, but the system complexity and deployment cost increase significantly

Engineering Contradiction:
Improvevulnerability detection capabilityVSAvoidsystem deployment complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a cloud-based intermediary system that acts as a mediator between the user and the vulnerability scanning infrastructure. Instead of requiring on-site installation of complex scanning software and hardware, the system provides remote access to cloud-hosted scanning capabilities through a simplified interface, thereby maintaining comprehensive detection capability while reducing deployment complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements virtualized copies of scanning infrastructure in the cloud that can be remotely accessed. Rather than deploying physical scanning hardware on-site, the system creates virtual instances of vulnerability scanning capabilities that users can access remotely, eliminating the need for complex on-site hardware installation while preserving full scanning functionality

Inventive Principle:
Principle #26Copying

2Measurement precision

If detailed vulnerability scan data is collected and stored, then comprehensive security assessment is achieved, but the data volume becomes large and difficult to consume

Engineering Contradiction:
Improvevulnerability assessment accuracyVSAvoidinformation accessibility
Core Design Contradiction:
Measurement precisionVSLoss of information

Solution Approach 1:

The patent segments the large volume of vulnerability scan data into structured categories and hierarchies, organizing information by vulnerability type, severity level, affected systems, and remediation status. This segmentation transforms raw data into manageable, searchable segments that maintain comprehensive detail while improving accessibility and reducing cognitive load for users

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent adds multiple dimensions of organization and visualization to the vulnerability data, including severity-based categorization, temporal trends, system-wise breakdowns, and remediation progress tracking. By presenting data across multiple dimensions simultaneously, the system maintains comprehensive information while making it more consumable through structured presentation and interactive visualization

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Speed

If real-time cybersecurity monitoring is implemented, then immediate threat detection is possible, but the computational resources and processing power required increase

Engineering Contradiction:
Improvethreat detection speedVSAvoidcomputational resource consumption
Core Design Contradiction:
SpeedVSUse of energy by moving object

Solution Approach 1:

The patent implements selective real-time monitoring that focuses computational resources on critical threat indicators and high-priority vulnerability patterns rather than analyzing all data streams uniformly. By applying partial action to the most important security parameters, the system achieves effective real-time threat detection while reducing overall computational resource consumption

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent establishes continuous monitoring pipelines that process security data in real-time streams rather than batch processing. By maintaining continuous analytical actions on incoming data, the system achieves immediate threat detection capability while optimizing resource utilization through sustained processing efficiency and avoiding the computational overhead of repeated full-scans

Inventive Principle:
Principle #20Continuity of useful action

4Ease of operation

If cloud-based processing is used to reduce on-site requirements, then deployment complexity decreases, but network dependency increases

Engineering Contradiction:
Improvedeployment easeVSAvoidsystem availability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements dynamic parameter adjustment that allows the system to adapt to network conditions. When network connectivity is reliable, the system operates in full cloud-based mode with maximum ease of deployment. When network issues arise, the system can adjust parameters to cache critical data locally or switch to offline analysis modes, thereby maintaining system availability while preserving cloud-based operational simplicity

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11070582B1Cloud-based cybersecurity portal with vulnerability data management
Publication Date: 2021.07.20 CYTELLIX CORP
  • US11070582B1 patent drawing
  • US11070582B1 patent drawing
  • US11070582B1 patent drawing

AI summary

A cybersecurity assessment system is provided for monitoring, assessing, and addressing the cybersecurity status of a target network. The cybersecurity assessment system may scan the target network and produce data regarding the current state and properties of devices on the target network, events occurring on the target network, vulnerabilities detected in devices on the target network, and the like. The cybersecurity assessment system can analyze the scan data and determine a degree to which the current status of the target network satisfies a particular cybersecurity readiness standard, and how the status changes over time. The cybersecurity assessment system can also transform large amounts of vulnerability scan data into efficient representations for use in providing interactive presentations of the vulnerabilities detected on the target network. The cybersecurity assessment system can also provide information regarding cybersecurity events in substantially real time.