Continuous Dynamic Mitigation System for Network Vulnerability Management

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing CDM systems face challenges in mitigating known weaknesses and vulnerabilities in networks, particularly when immediate updates are not feasible, and SIEM surveillance efficiency is hindered by irrelevant data collection.

Innovation Solution

The implementation of a CDM system enhanced with a KTMO and KTMM, which leverage ZTA SIEM activity auditing capabilities to prioritize surveillance resource usage, implement a known threat mitigation strategy, and manage resource allocation effectively.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the defender strategy is to keep the system without any known flaws, then security reliability is improved, but update timing is delayed creating vulnerability windows

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidupdate timing

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by scheduling and preparing updates in advance during low-risk periods, and by proactively identifying vulnerabilities before they can be exploited. The CDM system continuously monitors and prepares mitigation actions before actual security threats materialize, reducing the effective vulnerability window.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements beforehand cushioning by maintaining backup configurations and rollback capabilities before applying updates. This allows the system to safely apply updates during scheduled maintenance windows while having pre-prepared fallback options, thus maintaining reliability without extending vulnerability exposure.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

2Measurement precision

If SIEM surveillance collects comprehensive information, then detection capability is improved, but data processing complexity increases due to combinatorial explosion

Engineering Contradiction:

Improvedetection capabilityVSAvoiddata processing complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The system applies local quality by prioritizing surveillance resources on specific high-risk assets, threats, and network segments rather than uniformly monitoring everything. The CDM system dynamically adjusts surveillance intensity and focus based on risk assessments, concentrating processing power where it provides maximum security value while reducing overall complexity.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system segments the surveillance function into multiple specialized components that handle different aspects of security monitoring independently. By dividing the comprehensive surveillance task into modular segments focused on specific threat types or network zones, the system maintains high detection capability while managing data processing complexity through distributed, specialized processing units.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS20250112947A1Enhanced continuous mitigation system through the surveillance of known threats

Publication Date: 2025.04.03 DELL PROD LP

AI summary

One example method includes using a zero trust architecture to surveil a network to obtain information about a vulnerability in a network, determining, based on the information, a threat mitigation strategy responsive to the vulnerability, communicating the threat mitigation strategy to enable resource allocation for implementation of the threat mitigation strategy, allocating any needed resources for implementation of the threat mitigation strategy, and using the resources to implement the threat mitigation strategy.