Vulnerability Influence Evaluation via Dynamic Relevance Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vulnerability evaluation systems struggle to perform timely evaluations due to reliance on pre-stored data and difficulty in updating vulnerability information, leading to delayed risk assessments and increased security threats.
Innovation Solution
A vulnerability influence evaluation system that includes a vulnerability information storage unit, a collecting unit, a relevance determination unit, a vulnerability influence degree calculation unit, and a determination unit, which collectively assess the latest vulnerability information to determine the relevance and impact on an evaluation target, enabling timely and accurate vulnerability influence evaluations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If vulnerability information is stored in advance as pre-stored data, then the system can perform threat extraction and calculation, but it cannot timely perform vulnerability influence evaluation when new vulnerability information is added or updated
Solution Approach 1:
The system transitions from static pre-stored vulnerability data to dynamic real-time vulnerability information collection. The vulnerability information collecting unit continuously获取s latest vulnerability information from external sources, and the relevance determination unit dynamically matches this information with evaluation target configuration information, enabling timely vulnerability influence evaluation that adapts to new threats as they emerge.
2Measurement precision
If vulnerability addressing priority is calculated after security strength deterioration is observed, then the system can identify affected systems, but it cannot perform vulnerability influence evaluation before threats arise
Solution Approach 1:
The system performs preliminary vulnerability influence evaluation by proactively collecting vulnerability information and comparing it with evaluation target configuration information before security deterioration occurs. The relevance determination unit identifies potential matches between vulnerability targets and system configurations in advance, allowing the system to assess vulnerability influence and take preventive measures before actual security breaches happen.
Data Source
AI summary
The vulnerability influence evaluation system includes: a vulnerability information storage unit which stores vulnerability information; a vulnerability information collecting unit which collects the latest vulnerability information from the vulnerability information storage unit; a system relevance determination unit which compares system definition information about an evaluation target system with the vulnerability information, and determines whether or not there is relevance between the evaluation target system and vulnerability; a vulnerability influence degree calculation unit which calculates the vulnerability influence degree of vulnerability relevant to the evaluation target system on the basis of vulnerability influence degree calculation information; a vulnerability influence degree determination unit which performs determination as to the vulnerability level of the evaluation target system on the basis of the vulnerability influence degree; and an evaluation result output unit which outputs a result of determination by the vulnerability influence degree determination unit.