Software Exposure Detection With Automated Cross-App Mitigation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems fail to identify and mitigate exposures in software applications across multiple applications within an entity, as they do not account for software code provided by software as a service vendors and third-party entities.

Innovation Solution

A system utilizing a machine learning model to identify exposures in software applications, determine associated third-party entities, and automatically generate workflows to mitigate these exposures across impacted applications, incorporating pattern recognition and real-time updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual identification and mitigation of exposures is performed, then security accuracy is improved, but time consumption and operational efficiency deteriorate

Engineering Contradiction:
Improvesecurity accuracyVSAvoidtime consumption
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs self-service by automatically scanning software applications, identifying exposures, determining affected applications, and generating mitigation workflows without continuous human intervention. The machine learning model autonomously detects exposures and the system automatically propagates mitigation across impacted applications, eliminating the need for manual security audits while maintaining high accuracy.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical processes with automated computational systems. Machine learning models substitute human analysts for detecting exposures, and automated workflows replace manual mitigation processes. The system uses algorithmic pattern recognition to identify exposures across multiple applications, replacing the mechanical process of manual code review and security assessment.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If exposure identification is limited to single applications, then detection precision is improved, but coverage scope deteriorates

Engineering Contradiction:
Improvedetection precisionVSAvoidcoverage scope
Core Design Contradiction:
Measurement precisionVSAdaptability or versatility

Solution Approach 1:

The system exhibits universality by designing the exposure identification mechanism to function across multiple software applications simultaneously. The machine learning model is trained to recognize exposure patterns that can appear in various application types, and the automated workflow system universally applies mitigation across all impacted applications regardless of their specific function or technology stack.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system segments the analysis by first identifying exposures in individual applications with high precision, then systematically propagating the identification to other affected applications. The workflow breaks down the complex task of multi-application security assessment into manageable segments: identify exposure in one application, determine related applications, and apply mitigation across the segment of impacted systems.

Inventive Principle:
Principle #1Segmentation

3Productivity

If automated workflow generation is implemented, then operational efficiency is improved, but system complexity deteriorates

Engineering Contradiction:
Improveoperational efficiencyVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system performs preliminary action by pre-defining mitigation workflows and exposure identification rules before actual security incidents occur. The machine learning model is pre-trained on exposure patterns, and the automated workflow system has pre-configured mitigation procedures ready to execute immediately when exposures are detected, eliminating the need for complex real-time decision-making processes.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback loops where the results of exposure identification and mitigation execution are fed back into the system. The machine learning model learns from detected exposures and adjusts its detection accuracy, while the automated workflow system refines its mitigation processes based on execution outcomes. This continuous feedback reduces system complexity by using learned patterns rather than requiring complex hard-coded rules.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20260072745A1System and method for automatic identification and mitigation of exposures in software applications
Publication Date: 2026.03.12 BANK OF AMERICA CORP
  • US20260072745A1 patent drawing
  • US20260072745A1 patent drawing
  • US20260072745A1 patent drawing

AI summary

Embodiments of the present invention provide a system for automatically identifying and mitigating exposures in software applications. The system is configured for identifying an exposure in a software application associated with an entity, determining a third party entity associated with the exposure in the software application, automatically identifying other software applications within the entity that are impacted by the exposure, identifying one or more exceptions associated with the exposure, generating an automatic workflow process to mitigate outcomes associated with the exposure in the software application and the other software application, and executing the automatic workflow process to mitigate outcomes associated with the exposure in the software application and the other software application.