Automated Vulnerability Grouping and Delta Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing application vulnerability scanning systems require developers to manually compare scan results, track individual issues, and plan remediation, leading to inefficiencies and the lack of consideration for units of work, making it difficult for development teams to manage and prioritize vulnerabilities effectively.
Innovation Solution
A computer-implemented system that automatically generates unique issue IDs, compares issue data loads to identify deltas, groups issues into units of work, and integrates with developer task tracking tools to streamline remediation planning and execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If developers manually compare scan results and track individual issues, then detailed tracking is achieved, but time consumption and manual effort increase significantly
Solution Approach 1:
The system automatically compares current scan results with previous scan results to identify deltas, generating a consolidated list of changes without requiring manual developer comparison. The system self-manages the tracking process by automatically detecting new issues, resolved issues, and modified issues between scan cycles.
Solution Approach 2:
The patent replaces the manual mechanical process of comparing scan results and tracking issues with an automated computer-based system. The system uses programmatic comparison of scan data loads to identify deltas, substituting human manual operations with automated computational processes.
2Quantity of substance
If all individual issues are listed separately, then complete issue identification is achieved, but the complexity of managing and prioritizing issues increases
Solution Approach 1:
The system merges individual issues into consolidated groups based on their remediation context. Issues are grouped together when they can be remediated through the same activity or unit of work, reducing the perceived complexity while maintaining complete issue identification. The consolidated list presents issues in a manageable format that groups related problems.
3Reliability
If developers track remediation dates for every issue, then accountability is improved, but the workload and administrative overhead increase
Solution Approach 1:
The system automatically manages remediation tracking by comparing current scan results with previous results to identify deltas. The system self-assigns and tracks remediation status without requiring manual intervention for each individual issue, maintaining accountability while reducing administrative overhead.
Data Source
AI summary
The invention relates to a computer-implemented system and method for management of software application issues such as software application vulnerabilities or software quality. The method may comprise the steps of receiving software vulnerability data from a plurality of vulnerability scanning systems; automatically generating a unique vulnerability ID for a vulnerability using a plurality attributes of the vulnerability; comparing a current load of vulnerability data with a previous load of vulnerability data and generating a table of deltas; grouping vulnerabilities into a group that can be managed and remediated on a group basis as a unit of work rather than individually; and automatically generating entries in the developer task tracking system for each vulnerability group or individual vulnerabilities for resolution.