Managing supersedence of solutions for security issues among assets of an enterprise network
In an embodiment, a security auditing component obtains a solution set that is based upon a security audit of an enterprise network, the solution set characterizing a set of solutions associated with a set of security issues associated with one or more assets of the enterprise network, detects that the solution set can be condensed into a condensed solution set that mitigates the set of security issues to the same degree as the solution set, the detection being based at least in part upon (i) one or more rules applied to one or more solution texts and/or (ii) asset-specific metadata and/or (iii) static metadata, and condenses, based on the detecting, the solution set into the condensed solution set by combining two or more subsets of related solutions and/or filtering the solution set to remove one or more subsets of redundant or superseded solutions.
1. A method of operating a security auditing component configured to facilitate remediation of enterprise network security issues, comprising:
obtaining a solution set that is based upon a security audit of an enterprise network, the solution set characterizing a set of solutions associated with a set of security issues associated with one or more assets of the enterprise network;
appending one or more solutions in the solution set with asset-specific metadata for at least one asset of the one or more assets, the asset-specific metadata including information specifying one or more missing patches or updates associated with the at least one asset;
detecting that the solution set can be condensed into a condensed solution set that mitigates the set of security issues to the same degree as the solution set, the detection being based at least in part upon (i) one or more rules applied to one or more solution texts and/or (ii) the asset-specific metadata (iii) and/or static metadata;
condensing, based on the detecting, the solution set into the condensed solution set by combining two or more subsets of related solutions and/or filtering the solution set to remove one or more subsets of redundant or superseded solutions; and
transmitting, to a display component, a report that comprises at least one security issue and at least one corresponding solution based on the condensed solution set.
2. The method of claim 1 ,
wherein the obtaining the solution set is based on the security auditing component performing the security audit of the enterprise network, or
wherein the obtaining the solution set is from another component that performs the security audit.
3. The method of claim 1 , wherein the detection is based at least in part on the one or more rules.
4. The method of claim 1 , wherein the detection is based at least in part on the asset-specific metadata.
5. The method of claim 1 , wherein the condensing comprises combining the two or more subsets of related solutions.
6. The method of claim 5 , wherein the two or more subsets of related solutions are associated with at least one common security issue from the set of security issues.
7. The method of claim 1 , wherein the condensing comprises filtering the solution set to remove the one or more subsets of redundant or superseded solutions.
8. The method of claim 1 , further comprising:
wherein the detection is based at least in part upon the appended asset-specific metadata.
9. The method of claim 8 , wherein the asset-specific metadata further comprises:
information gathered during the security audit,
information identifying an installation targeted by the one or more solutions, or
any combination thereof.
10. The method of claim 1 , further comprising:
appending one or more solutions in the solution set with the static metadata,
wherein the detection is based at least in part upon the static metadata.
11. A security auditing component facilitating remediation of enterprise network security issues, the security auditing component comprising:
memory; and
at least one processor coupled to the memory,
wherein the at least one processor and the memory are configured to:
obtain a solution set that is based upon a security audit of an enterprise network, the solution set characterizing a set of solutions associated with a set of security issues associated with one or more assets of the enterprise network;
append one or more solutions in the solution set with asset-specific metadata for at least one asset of the one or more assets, the asset-specific metadata including information specifying one or more missing patches or updates associated with the at least one asset;
detect that the solution set can be condensed into a condensed solution set that mitigates the set of security issues to the same degree as the solution set, the detection being based at least in part upon (i) one or more rules applied to one or more solution texts and/or (ii) the asset-specific metadata and/or (iii) static metadata;
condense, based on the detecting, the solution set into the condensed solution set by combining two or more subsets of related solutions and/or filtering the solution set to remove one or more subsets of redundant or superseded solutions; and
transmit, to a display component, a report that comprises at least one security issue and at least one corresponding solution based on the condensed solution set.
12. The security auditing component of claim 11 ,
wherein the at least one processor and the memory are configured to obtain the solution set based on the security auditing component performing the security audit of the enterprise network, or
wherein the at least one processor and the memory are configured to obtain the solution set from another component that performs the security audit.
13. The security auditing component of claim 11 , wherein the detection is based at least in part on the one or more rules.
14. The security auditing component of claim 11 , wherein the detection is based at least in part on the asset-specific metadata.
15. The security auditing component of claim 11 , wherein the at least one processor and the memory are configured to condense the solution set by combining the two or more subsets of related solutions.
16. The security auditing component of claim 15 , wherein the two or more subsets of related solutions are associated with at least one common security issue from the set of security issues.
17. The security auditing component of claim 11 , wherein the at least one processor and the memory are configured to condense the solution set by filtering the solution set to remove the one or more subsets of redundant or superseded solutions.
18. The security auditing component of claim 11 ,
wherein the detection is based at least in part upon the appended asset-specific metadata.
19. The security auditing component of claim 18 , wherein the asset-specific metadata further comprises:
information gathered during the security audit,
information identifying an installation targeted by the one or more solutions, or
any combination thereof.
20. The security auditing component of claim 11 ,
wherein the at least one processor and the memory are further configured to append one or more solutions in the solution set with the static metadata,
wherein the detection is based at least in part upon the static metadata.
21. A non-transitory computer-readable medium storing computer-executable instructions for a security auditing component configured to facilitate remediation of enterprise network security issues, the computer-executable instructions comprising:
one or more instructions causing the security auditing component to obtain a solution set that is based upon a security audit of an enterprise network, the solution set characterizing a set of solutions associated with a set of security issues associated with one or more assets of the enterprise network;
one or more instructions causing the security auditing component to append one or more solutions in the solution set with asset-specific metadata for at least one asset of the one or more assets, the asset-specific metadata including information specifying one or more missing patches or updates associated with the at least one asset;
one or more instructions causing the security auditing component to detect that the solution set can be condensed into a condensed solution set that mitigates the set of security issues to the same degree as the solution set, the detection being based at least in part upon (i) one or more rules applied to one or more solution texts and/or (ii) the asset-specific metadata and/or (iii) static metadata;
one or more instructions causing the security auditing component to condense, based on the detecting, the solution set into the condensed solution set by combining two or more subsets of related solutions and/or filtering the solution set to remove one or more subsets of redundant or superseded solutions; and
one or more instructions causing the security auditing component to transmit, to a display component, a report that comprises at least one security issue and at least one corresponding solution based on the condensed solution set.
22. The non-transitory computer-readable medium of claim 21 ,
wherein the one or more instructions causing the security auditing component to obtain cause the security auditing component to obtain the solution set based on the security auditing component performing the security audit of the enterprise network, or
wherein the one or more instructions causing the security auditing component to obtain cause the security auditing component to obtain the solution set from another component that performs the security audit.
23. The non-transitory computer-readable medium of claim 21 , wherein the detection is based at least in part on the one or more rules.
24. The non-transitory computer-readable medium of claim 21 , wherein the detection is based at least in part on the asset-specific metadata.
25. The non-transitory computer-readable medium of claim 21 , wherein the one or more instructions causing the security auditing component to condense cause the security auditing component to condense the solution set by combining the two or more subsets of related solutions.
26. The non-transitory computer-readable medium of claim 25 , wherein the two or more subsets of related solutions are associated with at least one common security issue from the set of security issues.
27. The non-transitory computer-readable medium of claim 21 , wherein the one or more instructions causing the security auditing component to condense cause the security auditing component to condense the solution set by filtering the solution set to remove the one or more subsets of redundant or superseded solutions.
28. The non-transitory computer-readable medium of claim 21 ,
wherein the detection is based at least in part upon the appended asset-specific metadata.
29. The non-transitory computer-readable medium of claim 28 , wherein the asset-specific metadata further comprises:
information gathered during the security audit,
information identifying an installation targeted by the one or more solutions, or
any combination thereof.
30. The non-transitory computer-readable medium of claim 21 , further comprising:
one or more instructions causing the security auditing component to append one or more solutions in the solution set with the static metadata,
wherein the detection is based at least in part upon the static metadata.