Device Attribute Resolution for Accurate Vulnerability Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cybersecurity tools struggle with accurately detecting vulnerabilities in devices due to variations in device attribute formats, leading to false negatives, especially with bring your own device (BYOD) scenarios, as they often do not align with the format used in vulnerabilities databases.
Innovation Solution
Tokenize device attribute data into standardized tokens, create device attribute strings, and match them against a vulnerabilities database to identify vulnerabilities, using a token schema for accurate comparison and detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If device attribute data is analyzed using traditional cybersecurity tools, then vulnerability detection is performed, but false negatives occur due to format mismatches with vulnerabilities database
Solution Approach 1:
The patent transforms device attribute data by changing its format parameters through tokenization. Device attributes are converted into standardized tokens that match the vulnerability database schema, enabling accurate comparison and detection while eliminating false negatives caused by format mismatches
Solution Approach 2:
The patent introduces a tokenization intermediary layer between device attribute data and the vulnerabilities database. This intermediary process converts device attributes into a standardized token format that bridges the format gap, allowing reliable matching and detection without direct comparison of incompatible data structures
2Measurement precision
If device attribute data is tokenized and matched against vulnerabilities database, then detection accuracy is improved, but computing resources are consumed
Solution Approach 1:
The patent segments device attribute data into discrete tokens based on the vulnerability database schema. By dividing the attribute data into structured tokens (e.g., device type, operating system, version), the system enables efficient database matching that improves accuracy while optimizing computing resource utilization through organized data processing
Solution Approach 2:
The patent performs preliminary tokenization of device attribute data before the matching process. By pre-converting attributes into standardized tokens and organizing them according to the vulnerability database schema, the system prepares the data in advance, reducing the computational burden during the actual vulnerability detection phase
Data Source
AI summary
A system and method for vulnerability detection. A method includes: tokenizing device attribute data for a device into at least one set of first tokens, wherein each of the first tokens is formatted according to a token schema; creating at least one device attribute string, each device attribute string including one of the first tokens; matching each of the at least one device attribute string to combinations of device attributes stored in a vulnerabilities database in order to identify at least one matching combination of device attributes for the device, wherein the vulnerabilities database stores mappings between combinations of device attributes and vulnerabilities, wherein each combination of device attributes in the vulnerabilities database includes second tokens formatted according to the token schema; detecting at least one vulnerability of the device based on the at least one matching combination of device attributes and the mappings in the vulnerabilities database.