Multi-Channel Data Fusion for Cybersecurity Vulnerability Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cybersecurity monitoring architectures are limited in their ability to provide comprehensive insights into security vulnerabilities across multiple data planes and require separate cataloging of computer assets, leading to missed vulnerabilities due to incomplete asset identification, which can result in undetected cybersecurity threats and attacks.

Innovation Solution

A multi-channel data fusion system that integrates device connectivity data from various sources to identify vulnerabilities, assign them to specific cybersecurity dimensions, and generate multi-dimensional risk scores, enabling proactive detection and remediation through a user-interactive dashboard.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If existing cybersecurity monitoring architectures focus on a particular data plane, then monitoring depth for that specific plane is improved, but vulnerability detection coverage across multiple data planes deteriorates

Engineering Contradiction:
Improvevulnerability detection coverageVSAvoidmulti-channel data integration complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent combines multiple data channels (network data, infrastructure data, application data, asset data) into a unified cybersecurity monitoring system. The processing circuit integrates data from these separate channels to comprehensively identify vulnerabilities across all data planes, resolving the contradiction between monitoring depth and coverage by merging previously separate monitoring functions into a cohesive multi-dimensional system.

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If separate cataloging of computer assets is required, then asset tracking for monitored planes is improved, but asset identification completeness across all planes deteriorates

Engineering Contradiction:
Improveasset identification completenessVSAvoidasset cataloging complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a universal asset cataloging system that handles multiple types of assets across different data planes simultaneously. The processing circuit identifies and catalogs various asset types (network assets, infrastructure assets, application assets, device assets) through a single multi-functional system, eliminating the need for separate cataloging processes for each data plane and improving overall asset identification completeness.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Productivity

If cybersecurity monitoring is limited to particular data planes, then monitoring efficiency for those planes is improved, but vulnerability detection timeliness deteriorates

Engineering Contradiction:
Improvevulnerability detection timelinessVSAvoidmonitoring architecture complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by continuously collecting and preprocessing data from multiple channels in advance, maintaining updated asset catalogs and vulnerability databases ready for analysis. When security events occur, the system can immediately correlate them with pre-collected data from all data planes, enabling timely vulnerability detection without the delay of sequential data gathering from separate monitoring systems.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20250023904A1Security model utilizing multi-channel data
Publication Date: 2025.01.16 WELLS FARGO BANK NA
  • US20250023904A1 patent drawing
  • US20250023904A1 patent drawing
  • US20250023904A1 patent drawing

AI summary

Systems, methods, and computer-readable storage media are utilized to analyze multi-channel data based on a security model in a computer network environment. One system includes a plurality of data channels configured to access entity data and a processing circuit communicatively coupled to a data channel of the plurality of data channels, the processing circuit configured to identify at least one vulnerability, determine an impact of the at least one vulnerability, assign the first property to a first cybersecurity dimension, generate a cybersecurity risk score based at least on the impact of the at least one vulnerability, and generate a multi-dimensional score for a target computer network environment based on the cybersecurity risk score.