Unified Vulnerability Scoring via Covariate Vectors

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for assessing and prioritizing application vulnerabilities lack consistency and accuracy, leading to discrepancies in risk measurement and inefficient resource allocation for mitigation.

Innovation Solution

A method that ingests data from multiple sources, transforms it into covariate vectors, extracts keywords, statistically measures relevance, and uses statistical classification models to generate threat levels for application vulnerabilities, enabling effective prioritization and mitigation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If multiple vulnerability scoring systems (CVSS, CWE) are used to quantify risk, then more comprehensive vulnerability assessment is achieved, but terminology discrepancies and inconsistency increase

Engineering Contradiction:
Improvevulnerability risk measurementVSAvoidscoring system consistency
Core Design Contradiction:
Measurement precisionVSStability of the object's composition

Solution Approach 1:

The patent combines multiple vulnerability scoring systems (CVSS, CWE, and other taxonomies) into a unified machine learning model that processes diverse input features from different scoring systems. The model merges these heterogeneous data sources to generate a single, consistent risk score, eliminating terminology discrepancies while preserving the comprehensive assessment capabilities of individual systems.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal vulnerability scoring framework that can handle multiple input formats and scoring systems through a single machine learning model. This multi-functional system accepts diverse vulnerability data (CVSS scores, CWE classifications, exploit availability, patch status) and produces standardized risk assessments, making the system adaptable to various vulnerability types and scoring methodologies.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Measurement precision

If manual review of vulnerability results is performed to ensure accuracy, then scoring precision is improved, but processing time and resource consumption increase

Engineering Contradiction:
Improvevulnerability scoring accuracyVSAvoidvulnerability assessment time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent implements a self-service vulnerability assessment system where the machine learning model automatically processes vulnerability data, generates risk scores, and prioritizes findings without requiring manual analyst intervention. The model trains on historical vulnerability data and autonomously applies learned patterns to new vulnerabilities, maintaining high accuracy while eliminating time-consuming manual review processes.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical process of manual vulnerability review with an automated machine learning system. Instead of human analysts manually evaluating each vulnerability, the system uses trained algorithms to automatically assess risk, prioritize findings, and generate remediation recommendations, dramatically reducing assessment time while maintaining or improving accuracy.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Measurement precision

If comprehensive vulnerability data from multiple sources is collected, then assessment accuracy is improved, but data processing complexity increases

Engineering Contradiction:
Improvevulnerability assessment accuracyVSAvoiddata processing system
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent transforms diverse vulnerability data from multiple sources into standardized numerical features suitable for machine learning processing. The system converts qualitative information (vulnerability descriptions, exploit availability, patch status) into quantitative parameters that can be processed by the model, simplifying the handling of comprehensive data while maintaining assessment accuracy.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250055874A1Scoring application vulnerabilities
Publication Date: 2025.02.13 IVANTI INC
  • US20250055874A1 patent drawing
  • US20250055874A1 patent drawing
  • US20250055874A1 patent drawing

AI summary

An embodiment includes a method of application vulnerability assessment and prioritization. The method includes ingesting modelling data from data sources for application vulnerabilities. The method includes transforming at least a portion of the modelling data to covariate vectors. The method includes extracting keywords and phrases from the modelling data and statistically measuring relevance of files of the modelling data based on the extracted keywords and phrases. The method includes generating threat levels of the application vulnerabilities based on the covariate vectors and the measured relevance. The method includes outputting the threat levels to a network management system. The method includes implementing, at a first endpoint device of the network, a first patch to address one of the application vulnerabilities.