Threat mitigation system and method

1. A computer-implemented method, executed on a computing device, comprising: establishing connectivity with a plurality of security-relevant subsystems within a computing platform, including utilizing a respective application program interface (API) for accessing each of the plurality of security-relevant subsystems; mapping one or more data fields of a unified platform to one or more data, fields of each of the plurality of security-relevant subsystems; defining a unified query on a unified platform concerning the plurality of security-relevant subsystems; denormalizing the unified Query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining a plurality of subsystem-specific queries, including translating a syntax of the unified query to a syntax of each of the plurality of subsystem-specific queries; and providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.

2. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields within a query structure of the unified platform to one or more data fields within a query structure of each of the plurality of security-relevant subsystems.

3. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields within a result set structure of each of the plurality of security-relevant subsystems to one or more data fields within a result set structure of the unified platform.

4. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems at a defined periodicity.

5. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: proactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems, including actively monitoring the plurality of security-relevant subsystems.

6. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: reactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.

7. The computer-implemented method of claim 1 further comprising: receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.

8. The computer-implemented method of claim 7 further comprising: normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set.

9. The computer-implemented method of claim 8 further comprising: providing the unified result set to a third-party.

10. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising: establishing connectivity with a plurality of security-relevant subsystems within a computing platform, including utilizing a respective application program interface (API) for accessing each of the plurality of security-relevant subsystems; and mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems; defining a unified query on a unified platform concerning the plurality of security-relevant subsystems; denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining a plurality of subsystem-specific queries, including translating a syntax of the unified query to a syntax of each of the plurality of subsystem-specific queries, and providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.

11. The computer program product of claim 10 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields within a query structure of the unified platform to one or more data fields within a query structure of each of the plurality of security-relevant subsystems.

12. The computer program product of claim 10 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields within a result set structure of each of the plurality of security-relevant subsystems to one or more data fields within a result set structure of the unified platform.

13. The computer program product of claim 10 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems at a defined periodicity.

14. The computer program product of claim 10 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: proactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems, including actively monitoring the plurality of security-relevant subsystems.

15. The computer program product of claim 10 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: reactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.

16. The computer program product of claim 10 further comprising: receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.

17. The computer program product of claim 16 further comprising: normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set.

18. The computer program product of claim 17 further comprising: providing the unified result set to a third-party.

19. A computing system including a processor and memory configured to perform operations comprising: establishing connectivity with a plurality of security-relevant subsystems within a computing platform, including utilizing a respective application program interface (API) for accessing each of the plurality of security-relevant subsystems; and mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems; defining a unified query on a unified platform concerning the plurality of security-relevant subsystems; denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining a plurality of subsystem-specific queries, including translating a syntax of the unified query to a syntax of each of the plurality of subsystem-specific queries; and providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.

20. The computing system of claim 19 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: Amendment Dated: mapping one or more data fields within a query structure of the unified platform to one or more data fields within a query structure of each of the plurality of security-relevant subsystems.

21. The computing system of claim 19 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields within a result set structure of each of the plurality of security-relevant subsystems to one or more data fields within a result set structure of the unified platform.

22. The computing system of claim 19 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems at a defined periodicity.

23. The computing system of claim 19 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: proactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems, including actively monitoring the plurality of security-relevant subsystems.

24. The computing system of claim 19 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes: reactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.

25. The computing system of claim 19 further comprising: receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.

26. The computing system of claim 25 further comprising: normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set.

27. The computing system of claim 26 further comprising: providing the unified result set to a third-party.