Vulnerability State Delta Detection for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network vulnerability scanning methods often produce large, cumbersome lists of vulnerabilities that include irrelevant data and may not detect changes in real-time, leading to delayed identification of vulnerabilities and increased processing burdens.
Innovation Solution
A system and method for detecting vulnerability state deltas, which involves pseudo-continuous scanning, data compilation from various sources, and reporting only changes in the vulnerability state, allowing for efficient monitoring and reduced resource impact by focusing on differences rather than complete vulnerability lists.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete vulnerability lists are generated from periodic scans, then comprehensive vulnerability detection is achieved, but the data volume and processing burden increase significantly
Solution Approach 1:
The patent extracts only the changed vulnerability data (deltas) from complete vulnerability scans, rather than processing entire vulnerability lists. This is achieved by comparing current scan results with baseline data and transmitting only the differences, thereby reducing data volume while maintaining detection completeness.
Solution Approach 2:
The vulnerability detection process is segmented into baseline scanning, delta identification, and selective reporting stages. By dividing the complete vulnerability list into baseline data and change deltas, the system processes only relevant changes rather than entire vulnerability datasets.
2Loss of time
If periodic vulnerability scans are performed, then vulnerability detection is achieved, but real-time detection capability is lost
Solution Approach 1:
The system uses periodic baseline scans combined with continuous delta detection. While complete scans occur periodically, the system continuously monitors for changes between scans by comparing new data against baseline, enabling near-real-time vulnerability detection without requiring continuous full-scale scanning.
Solution Approach 2:
Baseline vulnerability data is captured in advance and stored for comparison. This preliminary action enables rapid delta detection when new scans are performed, reducing the time needed to identify new vulnerabilities without requiring continuous scanning.
3Reliability
If frequent vulnerability scans are conducted, then real-time vulnerability detection is improved, but resource consumption increases
Solution Approach 1:
The system extracts and processes only the delta portion of vulnerability data rather than analyzing complete vulnerability lists repeatedly. By identifying and transmitting only changed elements between scans, computational resources are significantly reduced while maintaining timely detection capability.
Solution Approach 2:
Instead of performing complete vulnerability analysis on entire networks at frequent intervals, the system performs partial analysis focused only on changed elements. This selective processing approach consumes fewer resources while achieving the same detection effectiveness for new vulnerabilities.
Data Source
AI summary
Described herein is a system and method for detecting vulnerability state deltas, the method comprising the steps of: receiving data related to a network connected device; determining a vulnerability state of the network connected device based upon the data; storing the vulnerability state in a vulnerability state database; receiving additional data related to the network connected device; determining an updated vulnerability state of the network connected device based upon the additional data; determining one or more deltas based upon differences between the vulnerability stare and the updated vulnerability state; and updating the stored vulnerability state with the updated vulnerability state.