Vulnerability Risk Scoring by Technical Similarity in OT Systems

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems struggle to efficiently address multiple vulnerabilities in operational technology (OT) systems due to limited maintenance timing, leading to potential security risks from unpatched vulnerabilities similar to high-risk ones, which can disrupt system operation.

Innovation Solution

An information processing system that detects risky vulnerabilities and calculates technical and object similarities to identify target vulnerabilities, applying patch programs or mitigation measures to minimize system disruption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If only the minimum patch programs are applied to deal with high-risk vulnerabilities, then the immediate security risk is reduced, but other similar vulnerabilities remain unaddressed and can be attacked later

Engineering Contradiction:

Improvesecurity risk reductionVSAvoidsystem operation efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary analysis of vulnerability similarities and predicts future attack risks before actual attacks occur. By calculating technical similarities between vulnerabilities and predicting which unpatched vulnerabilities are likely to be targeted next, the system enables proactive security measures rather than reactive patching, thus maintaining security while minimizing operational disruption

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system establishes a feedback loop that continuously monitors vulnerability landscapes, analyzes attack patterns, and updates predictions about which vulnerabilities are likely to be attacked. This feedback mechanism allows the system to dynamically adjust priority assignments and recommend patching sequences that optimize both security and operational efficiency

Inventive Principle:

Principle #23Feedback

2Reliability

If vulnerability patching is performed frequently to address all reported vulnerabilities, then system security is improved, but system operation is significantly disrupted

Engineering Contradiction:

Improvesystem securityVSAvoidsystem operation continuity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system applies different priority levels and patching strategies to different vulnerabilities based on their specific characteristics, technical similarities to known attack vectors, and predicted attack probabilities. Rather than uniform patching, each vulnerability receives a customized priority assignment that reflects its actual risk profile, allowing critical patches to be applied while deferring less critical ones

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system dynamically changes the priority parameter of vulnerabilities based on evolving threat landscapes, attack patterns, and system contexts. By recalculating technical similarities and update priority assignments as new vulnerability information becomes available, the system adapts patching schedules to balance security needs with operational continuity

Inventive Principle:

Principle #35Parameter changes

3Productivity

If manual keyword-based priority assignment is used to deal with vulnerabilities, then high-risk vulnerabilities are addressed, but similar vulnerabilities requiring different keywords are not dealt with efficiently

Engineering Contradiction:

Improvevulnerability response speedVSAvoidsimilar vulnerability detection

Core Design Contradiction:

ProductivityVSDifficulty of detecting and measuring

Solution Approach 1:

The system introduces technical similarity calculations as an intermediary mechanism that bridges the gap between manually assigned priorities and actual vulnerability risks. By computing objective similarity metrics between vulnerabilities based on their technical characteristics, the system automatically identifies and prioritizes similar vulnerabilities without requiring manual keyword assignment for each one

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system copies and applies priority assignments from known high-risk vulnerability patterns to newly discovered vulnerabilities that exhibit similar technical characteristics. By replicating successful priority determination approaches across similar vulnerability types, the system efficiently extends security coverage to previously unaddressed similar vulnerabilities

Inventive Principle:

Principle #26Copying

Data Source

PatentUS12536301B2Information processing device, information processing system, information processing method, and computer program product

Publication Date: 2026.01.27 KK TOSHIBA

AI summary

An information processing device according to an embodiment includes a risky vulnerability detection unit, a technical similarity calculation unit, a risk score calculation unit, and an output unit. The risky vulnerability detection unit detects, as a risky vulnerability, a vulnerability having the possibility of being attacked for an object system executing information processing. For each vulnerability registered in advance, the technical similarity calculation unit calculates a technical similarity representing a technical similarity to the risky vulnerability. For each vulnerability, the risk score calculation unit calculates a risk score representing the level of the risk of attack on each vulnerability in the object system, based on the technical similarity. The output unit determines at least one of the vulnerabilities as a target vulnerability to be dealt with, based on the risk score for each vulnerability, and outputs identification information for identifying the target vulnerability.