Vulnerability Information Processing for Priority-Based Inquiry Generation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The high cost and inefficiency of obtaining and acting on vulnerability information in cybersecurity measures due to the need for extensive communication with external organizations and internal departments, which existing natural language processing technologies do not address.

Innovation Solution

A vulnerability information processing apparatus that includes a software configuration database, vulnerability database, and a text generation unit to calculate countermeasure priorities and generate texts for inquiries or reports based on configuration and vulnerability information, reducing the need for manual communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security personnel manually contact external organizations and internal departments to process vulnerability information, then the accuracy and completeness of vulnerability assessment is improved, but the communication workload and cost increase significantly

Engineering Contradiction:

Improvevulnerability assessment accuracyVSAvoidcommunication efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system enables automatic self-processing of vulnerability information by having the AI model autonomously generate inquiry texts, determine contact targets, and communicate with external organizations and internal departments without requiring manual intervention from security personnel, thereby maintaining assessment accuracy while significantly reducing communication workload

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical manual communication process with an AI-based automated system that uses natural language processing to generate inquiry texts and manage communications, substituting human manual operations with intelligent automation to resolve the contradiction between communication efficiency and workload

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If security personnel manually draft and send inquiry texts to external organizations, then the appropriateness of communication content is improved, but the time consumption and labor cost increase

Engineering Contradiction:

Improvecommunication appropriatenessVSAvoidtext generation time

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-defining communication templates, contact target lists, and vulnerability assessment criteria before actual communication occurs, allowing the AI model to quickly generate appropriate inquiry texts without manual drafting time while maintaining communication appropriateness

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent substitutes manual text drafting with AI-based automated text generation that uses natural language processing to create appropriate communication content instantly, eliminating the time-consuming manual writing process while preserving the appropriateness of communication through intelligent content generation

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If the system processes all vulnerability information manually, then the completeness of information processing is improved, but the cost of hiring experts increases

Engineering Contradiction:

Improveinformation processing completenessVSAvoidexpert hiring cost

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system enables complete information processing through self-service automation where the AI model independently analyzes vulnerability information, generates appropriate inquiry texts, determines contact targets, and manages communications without requiring expert human intervention, thereby maintaining processing completeness while eliminating the need to hire expensive security experts

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical process of manual expert analysis with an AI-based automated system that performs complete vulnerability information processing through intelligent algorithms, substituting human expert labor with automated technology to reduce costs while maintaining processing completeness

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250238525A1Vulnerability information processing apparatus, method, and program

Publication Date: 2025.07.24 HITACHI LTD

AI summary

A vulnerability information processing apparatus 100 includes a software configuration database 220, a vulnerability database 210, and a text generation unit 120. The software configuration database stores configuration information of software that needs to be managed. The vulnerability database stores vulnerability information of the software. The text generation unit calculates a countermeasure priority 310 for the software based on the configuration information and the vulnerability information and generates text 330 regarding vulnerability of the software based on the calculated countermeasure priority.