Vulnerability Trust Evaluation for Prioritized Security Remediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vulnerability detection methods overwhelm users with numerous prompts, making it difficult to quickly identify key vulnerabilities that need repair, leading to high costs and inefficiencies in manual analysis.
Innovation Solution
Perform trust evaluations on detected vulnerabilities using hazard level and service impact evaluation items, determining a trust level, and processing vulnerabilities based on a preset trust list to prioritize which vulnerabilities require repair.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all detected vulnerabilities are prompted to users, then completeness of vulnerability notification is improved, but user burden and difficulty in identifying key vulnerabilities increases
Solution Approach 1:
The patent introduces a trust evaluation mechanism as an intermediary between vulnerability detection and user notification. The system calculates trust levels for vulnerabilities based on multiple evaluation items (hazard level, service impact, etc.) and uses this trust information to filter and prioritize which vulnerabilities are presented to users. This intermediary layer resolves the contradiction by maintaining complete tracking of all vulnerabilities while selectively notifying users only about those with low trust levels that require attention.
Solution Approach 2:
The patent changes the parameter of vulnerability notification from binary (notify/notify) to multi-dimensional (trust level scoring). By introducing trust level as a parameter derived from hazard level, service impact, and other factors, the system can prioritize notifications and present vulnerabilities to users in order of importance. This parameter transformation allows the system to maintain completeness internally while reducing user burden externally.
2Measurement precision
If manual analysis of all vulnerabilities is performed, then accuracy of vulnerability assessment is improved, but time consumption and cost increases
Solution Approach 1:
The patent implements a self-service mechanism where the system automatically evaluates and prioritizes vulnerabilities using predefined trust evaluation criteria. The trust evaluation module automatically calculates trust levels based on hazard level, service impact, and other evaluation items without requiring manual intervention for each vulnerability. This self-service approach maintains assessment accuracy through systematic evaluation while dramatically reducing the time and cost of manual analysis.
Solution Approach 2:
The patent performs preliminary trust evaluation on all vulnerabilities before presenting them to users. By pre-calculating trust levels and filtering out high-trust (low-risk) vulnerabilities in advance, the system prepares a prioritized list that requires minimal manual review. This preliminary action ensures accurate assessment through automated evaluation while reducing the time users need to spend on analysis.
3Measurement precision
If trust evaluation with multiple evaluation items is performed, then accuracy of vulnerability prioritization is improved, but system complexity increases
Solution Approach 1:
The patent segments the trust evaluation process into distinct, modular evaluation items: hazard level evaluation, service impact evaluation, and other specific evaluation dimensions. Each evaluation item is handled by a separate module that calculates its specific metric, and the results are aggregated to form the overall trust level. This segmentation maintains high prioritization accuracy through comprehensive evaluation while managing system complexity through modular design.
Data Source
AI summary
A vulnerability processing method, apparatus and device, and a computer-readable storage medium. The method includes: a trust evaluation of preset evaluation items on a detected vulnerability is performed, and a trust level corresponding to the vulnerability is obtained, and the vulnerability is processed according to the trust level and a preset vulnerability trust list. In the present disclosure, through performing the trust evaluation of preset evaluation items on a detected vulnerability and obtaining the trust level corresponding to the vulnerability and setting the preset vulnerability trust list, vulnerabilities that do not need to be repaired in detected vulnerabilities can be preliminarily screened, and in combination with an impact of the vulnerabilities on an actual service of a user, the user is assisted in quickly identifying a key vulnerability that needs to be repaired, thereby improving usability and efficiency, and reducing costs of manual analysis of vulnerabilities.