IT vulnerability management system
View Patent ↗A system for automatically managing vulnerabilities may determine vulnerability data describing vulnerabilities in an information technology environment and then assign each vulnerability to a stakeholder for remediation. The system may receive a remediation proposal from the stakeholder, obtain approval for the remediation proposal, and facilitate remediation of the vulnerability based on the proposal.
1. A computer-implemented method comprising:
determining vulnerability data describing vulnerabilities of an information technology environment by scanning a plurality of computing devices coupled to a network for the vulnerabilities using a plurality of network scanners;
generating, using one or more hardware processors, risk tickets using the vulnerability data, each risk ticket including one or more remediation operations for remediating one or more of the vulnerabilities;
assigning, in a data store using the one or more hardware processors, each risk ticket to a corresponding stakeholder identifier associated with a stakeholder based on an association of one or more predetermined skills of the stakeholder with the one or more remediation operations for remediating the one or more of the vulnerabilities of the risk ticket;
receiving, using the one or more hardware processors, a remediation proposal from the stakeholder of a first vulnerability for remediating the first vulnerability; and
obtaining, using the one or more hardware processors, an approval for the remediation proposal to remediate the first vulnerability as proposed.
2. The computer-implemented method of claim 1 , further comprising:
determining one or more future vulnerabilities to be similar to the first vulnerability;
associating, based on the risk ticket, the remediation proposal with the one or more future vulnerabilities based on the similarity of the one or more future vulnerabilities to the first vulnerability; and
facilitating remediation of the one or more future vulnerabilities based on the associated remediation proposal.
3. The computer implemented method of claim 1 , further comprising:
determining a second vulnerability included in the vulnerability data to be a new vulnerability;
identifying one or more remediation steps for remediating the second vulnerability; and
generating a remediation ticket based on the one or more remediation steps, wherein assigning of each of the vulnerabilities includes assigning the second vulnerability to a corresponding stakeholder.
4. The computer-implemented method of claim 1 , further comprising:
receiving a remediation proposal for a second vulnerability, the remediation proposal indicating to fix the second vulnerability; and
facilitating the remediation of the second vulnerability.
5. The computer-implemented method of claim 1 , wherein the remediation proposal indicates to suppress the first vulnerability and obtaining the approval for the remediation proposal includes requesting administrative approval from an administrator of the stakeholder.
6. The computer-implemented method of claim 1 , wherein the remediation proposal indicates to except the first vulnerability and obtaining the approval for the remediation proposal includes requesting administrative approval from an administrator of the stakeholder.
7. The computer-implemented method of claim 1 , wherein obtaining the approval includes:
receiving approval from an administrator approving the remediation proposal;
exempting or suppressing the first vulnerability for a predetermined amount of time; and
once the predetermined amount of time has expired, renew or remove the remediation proposal.
8. The computer implemented method of claim 1 , wherein the vulnerabilities include one or more of backdoors, overflow vulnerabilities, obsolete software, out of date software, software bugs, spyware, default or weak passwords, insecure network architecture, and hardware vulnerabilities.
9. A computer program product comprising a non-transitory computer-usable medium including instructions which, when executed by a computer, cause the computer to:
determine vulnerability data describing vulnerabilities of an information technology environment by scanning a plurality of computing devices coupled to a network for the vulnerabilities using a plurality of network scanners;
generate risk tickets using the vulnerability data, each risk ticket including one or more remediation operations for remediating one or more of the vulnerabilities;
assign in a data store each risk ticket to a corresponding stakeholder identifier associated with a stakeholder based on an association of one or more predetermined skills of the stakeholder with the one or more remediation operations for remediating the one or more of the vulnerabilities of the risk ticket;
receive a remediation proposal from the stakeholder of a first vulnerability for remediating the first vulnerability; and
obtain an approval for the remediation proposal to remediate the first vulnerability as proposed.
10. The computer program product of claim 9 , further including instructions which, when executed by a computer, cause the computer to:
determine one or more future vulnerabilities to be similar to the first vulnerability;
associate, based on the risk ticket, the remediation proposal with the one or more future vulnerabilities based on the similarity of the one or more future vulnerabilities to the first vulnerability; and
facilitate remediation of the one or more future vulnerabilities based on the associated remediation proposal.
11. The computer program product of claim 9 , wherein the instructions further cause the computer to:
determine a second vulnerability included in the vulnerability data to be a new vulnerability;
identify one or more remediation steps for remediating the second vulnerability; and
generate a remediation ticket based on the one or more remediation steps, wherein assigning of each of the vulnerabilities includes assigning the second vulnerability to a corresponding stakeholder.
12. The computer program product of claim 9 , wherein the instructions further cause the computer to:
receive a remediation proposal for a second vulnerability, the remediation proposal indicating to fix the second vulnerability; and
facilitate the remediation of the second vulnerability.
13. The computer program product of claim 9 , wherein the remediation proposal indicates to suppress the first vulnerability and to obtain the approval for the remediation proposal includes requesting administrative approval from an administrator of the stakeholder.
14. The computer program product of claim 9 , wherein the remediation proposal indicates to except the first vulnerability and to obtain the approval for the remediation proposal includes requesting administrative approval from an administrator of the stakeholder.
15. The computer program product of claim 9 , wherein to obtain the approval includes:
receiving approval from an administrator approving the remediation proposal;
exempting or suppressing the first vulnerability for a predetermined amount of time; and
once the predetermined amount of time has expired, renew or remove the remediation proposal.
16. The computer program product of claim 9 , wherein the vulnerabilities include one or more of backdoors, overflow vulnerabilities, obsolete software, out of date software, software bugs, spyware, default or weak passwords, insecure network architecture, and hardware vulnerabilities.
17. A system comprising:
one or more hardware processors; and
one or more memories storing instructions that, when executed by the one or more processors, cause the system to:
determine vulnerability data describing vulnerabilities of an information technology environment by scanning a plurality of computing devices coupled to a network for the vulnerabilities using a plurality of network scanners;
generate risk tickets using the vulnerability data, each risk ticket including one or more remediation operations for remediating one or more of the vulnerabilities;
assign, in a data store, each risk ticket to a corresponding stakeholder identifier associated with a stakeholder based on an association of one or more predetermined skills of the stakeholder with the one or more remediation operations for remediating the one or more of the vulnerabilities of the risk ticket;
receive a remediation proposal from the stakeholder of a first vulnerability for remediating the first vulnerability; and
obtain an approval for the remediation proposal to remediate the first vulnerability as proposed.
18. The system of claim 17 , further comprising instructions that, when executed by the one or more processors, cause the system to:
determine one or more future vulnerabilities to be similar to the first vulnerability;
associate, based on the risk ticket, the remediation proposal with the one or more future vulnerabilities based on the similarity of the one or more future vulnerabilities to the first vulnerability; and
facilitate remediation of the one or more future vulnerabilities based on the associated remediation proposal.
19. The system of claim 17 , wherein the instructions, when executed by the one or more processors, further cause the system to:
determine a second vulnerability included in the vulnerability data to be a new vulnerability;
identify one or more remediation steps for remediating the second vulnerability; and
generate a remediation ticket based on the one or more remediation steps, wherein assigning of each of the vulnerabilities includes assigning the second vulnerability to a corresponding stakeholder.
20. The system of claim 17 , wherein the instructions, when executed by the one or more processors, further cause the system to:
receive a remediation proposal for a second vulnerability, the remediation proposal indicating to fix the second vulnerability; and
facilitate the remediation of the second vulnerability.
21. The system of claim 17 , wherein the remediation proposal indicates to suppress the first vulnerability and to obtain the approval for the remediation proposal includes requesting administrative approval from an administrator of the stakeholder.
22. The system of claim 17 , wherein the remediation proposal indicates to except the first vulnerability and to obtain the approval for the remediation proposal includes requesting administrative approval from an administrator of the stakeholder.
23. The system of claim 17 , wherein to obtain the approval includes:
receiving approval from an administrator approving the remediation proposal;
exempting or suppressing the first vulnerability for a predetermined amount of time; and
once the predetermined amount of time has expired, renewing or removing the remediation proposal.
24. The system of claim 17 , wherein the vulnerabilities include one or more of backdoors, overflow vulnerabilities, obsolete software, out of date software, software bugs, spyware, default or weak passwords, insecure network architecture, and hardware vulnerabilities.