Vulnerability remediation using an autonomous artificial-intelligence application
A system and method for vulnerability redemption is disclosed. The method comprises extracting vulnerability details from a vulnerability report regarding an affected host, constructing a bot query based on the vulnerability details, receiving a vulnerability resolution script from a bot in response to the bot query, triggering execution of the vulnerability resolution script on the affected host, receiving an indication of successful execution of the vulnerability resolution script on the affected host, and saving the vulnerability resolution script to a remediation database.
1 . A method for vulnerability redemption, comprising:
extract vulnerability details from a vulnerability report regarding a vulnerability associated with an Information Handling System (IHS);
construct a bot query based on the vulnerability details;
receive, in a bot response, a vulnerability resolution script from a bot in response to the bot query;
extract one or more executable code snippets from the bot response and save the one or more executable code snippets to a script file at a script file path;
sanitize, using an AI-based service or chatbot, the script file to generate a sanitized vulnerability resolution script;
trigger execution of the sanitized vulnerability resolution script on the IHS;
receive an indication of successful execution of the sanitized vulnerability resolution script on the IHS;
trigger, using an application programming interface (API), a vulnerability scan of the IHS to validate remediation of the vulnerability; and
save the sanitized vulnerability resolution script and the script file path to a remediation database as an approved solution in response to successful validation of the remediation.
2 . The method of claim 1 , further comprising:
receive an indication of failure of execution of the sanitized vulnerability resolution script from the IHS;
construct a revised bot query with resolution script failure details;
receive, in an updated bot response, an updated vulnerability resolution script from the bot in response to the revised bot query;
extract one or more updated executable code snippets from the updated bot response and save the one or more updated executable code snippets to an updated script file at an updated script file path;
sanitize, using the AI-based service or chatbot, the updated script file to generate a sanitized updated vulnerability resolution script;
trigger execution of the sanitized updated vulnerability resolution script on the IHS; and
receive the indication of successful execution in response to the sanitized updated vulnerability resolution script.
3 . The method of claim 2 , further comprising:
perform multiple iterations of constructing revised bot queries, receiving updated vulnerability resolution scripts, and triggering execution of the updated vulnerability resolution scripts on the IHS up to a predetermined number of iterations, until the indication of successful execution of the vulnerability resolution script is received.
4 . The method of claim 2 , further comprising:
update the remediation database with one or more of: an indication of execution success or failure, time taken for the execution, and disruptive actions on the IHS associated with the execution.
5 . The method of claim 1 , wherein the vulnerability details comprise one or more of: an affected IHS name, an affected IHS IP address, operating system information, recommended fix details for remediation of the vulnerability.
6 . The method of claim 1 , wherein the vulnerability details identify risks of one or more cyber attacks, exploits, or malware directed at the IHS.
7 . The method of claim 1 , wherein the bot is a publicly available autonomous artificial-intelligence (AI) application.
8 . The method of claim 1 , further comprising:
check the remediation database for a resolution script associated with the bot query.
9 . The method of claim 1 , further comprising:
check the remediation database for a resolution script associated with the vulnerability details.
10 . The method of claim 1 , further comprising:
calculate a solution effectiveness score for the vulnerability resolution script.
11 . A method for managing vulnerability redemption scripts, comprising:
receive an indication of successful execution of a sanitized vulnerability resolution script on an affected Information Handling System (IHS), wherein a vulnerability resolution script is received from a bot in response to a query constructed from a vulnerability report concerning a vulnerability associated with the affected IHS and sanitized, using an AI-based service or chatbot, prior to execution;
in response to the indication of successful execution of the sanitized vulnerability resolution script, trigger a vulnerability scan of the IHS to validate remediation of the vulnerability:
in response to successful validation of the remediation, save the sanitized vulnerability resolution script to a remediation database as an approved solution, save, in association with the approved solution, a script file path of a script file containing executable code snippets extracted from a bot response; and
calculate a solution effectiveness score for the sanitized vulnerability resolution script.
12 . The method of claim 11 , wherein the solution effectiveness score comprises one or more of: an execution time score, a disruption score, a platform supported score, and a solution utilization score.
13 . The method of claim 12 , wherein the disruption score is based upon whether an IHS reboot was required, a number of reboots required, whether a service restart was required, and whether a user logout was required.
14 . The method of claim 12 , wherein the platform supported score is based upon a number of platforms supported and/or a number of platform versions supported.
15 . The method of claim 12 , wherein the solution utilization score is based on a number of times that the sanitized vulnerability resolution script is used and a number of platforms that utilize the sanitized vulnerability resolution script.
16 . The method of claim 12 , wherein the sanitized vulnerability resolution script is generated after multiple iterations of bot queries including revised bot queries that include resolution script failure details comprising a failure summary and/or error codes, the multiple iterations cycling up to a predetermined number of iterations.