IP Library › Granted Patent US 12,086,269
Granted Patent B2
US 12,086,269 · App. 17/699,443 · Granted Sep 10, 2024

System for deployable software vulnerability testing platform

Inventors: Manu Jacob Kurian (Dallas, TX); Tomas M. Castrejon, III (Fort Mill, SC); Michael Robert Young (Davidson, NC); David Nardoni (Sierra Madre, CA); Joel Townsend (Spring Church, PA)
Assignee: BANK OF AMERICA CORPORATION
G06F21/577G06F8/60G06F8/65G06F2221/033
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,086,269
App. No.
17/699,443
Granted
Sep 10, 2024
Kind
B2
Abstract

Systems, computer program products, and methods are described herein for deployable software vulnerability testing platform. The present invention is configured to receive, from a user input device, an initial request from a user to generate a deployable software vulnerability testing (SVT) engine; prompt an SVT dashboard for display on the user input device to receive one or more input parameters associated with the first vulnerability in response to receiving the initial request; receive, via the SVT dashboard, the one or more input parameters; generate the SVT engine based on at least the one or more input parameters; receive, from the user input device, one or more deployment parameters associated with a deployment of the SVT engine; and deploy the SVT engine within the distributed technology infrastructure to identify the one or more instances of the first vulnerability based on at least the one or more deployment parameters.

Claims (61)

1. A system for deployable software vulnerability testing platform, the system comprising:

at least one processor; and

at least one non-transitory storage device containing instructions that, when executed by the at least one processor, cause the at least one processor to:

receive, from a user input device, an initial request from a user to generate a deployable software vulnerability testing (SVT) engine to identify one or more instances of a first vulnerability within a distributed technology infrastructure;

prompt an SVT dashboard for display on the user input device to receive one or more input parameters associated with the first vulnerability in response to receiving the initial request;

receive, via the SVT dashboard, the one or more input parameters;

generate the SVT engine based on at least the one or more input parameters;

receive, from the user input device, one or more deployment parameters associated with a deployment of the SVT engine;

deploy the SVT engine within the distributed technology infrastructure to identify the one or more instances of the first vulnerability based on at least the one or more deployment parameters;

receive, from the user input device, one or more actions to be executed in response to identifying the one or more instances of the first vulnerability within the distributed technology infrastructure;

store the one or more actions in an action repository;

identify the one or more instances of the first vulnerability within the distributed technology infrastructure based on at least deploying the SVT engine within the distributed technology infrastructure;

automatically retrieve, from the action repository, the one or more actions in response to identifying the one or more instances of the first vulnerability; and

execute the one or more actions on the first vulnerability in the one or more instances identified.

2. The system of claim 1 , wherein the SVT engine is platform agnostic.

3. The system of claim 1 , wherein the instructions, when executed, further cause the at least one processor to:

receive, via the SVT dashboard, the one or more deployment parameters, wherein the one or more deployment parameters comprises at least information associated a first set of applications within the distributed technology infrastructure; and

deploy the SVT engine to identify the one or more instances of the first vulnerability within the first set of applications within the distributed technology infrastructure.

4. The system of claim 3 , wherein the information associated with the first set of applications comprises at least an application version.

5. The system of claim 1 , wherein the instructions, when executed, further cause the at least one processor to:

receive, via the SVT dashboard, the one or more deployment parameters, wherein the one or more deployment parameters comprises at least information associated with one or more software libraries;

determine a second set of applications that are associated with the one or more software libraries; and

deploy the SVT engine to identify the one or more instances of the first vulnerability within the second set of applications within the distributed technology infrastructure.

6. The system of claim 1 , wherein the one or more input parameters comprises at least information associated with the first vulnerability, wherein the information comprises at least one or more known vulnerability signatures associated with the first vulnerability.

7. The system of claim 1 , wherein the one or more actions comprises at least a software patch configured to address the first vulnerability in the one or more instances identified.

8. A computer program product for deployable software vulnerability testing platform, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

receive, from a user input device, an initial request from a user to generate a deployable software vulnerability testing (SVT) engine to identify one or more instances of a first vulnerability within a distributed technology infrastructure;

prompt an SVT dashboard for display on the user input device to receive one or more input parameters associated with the first vulnerability in response to receiving the initial request;

receive, from the user input device, one or more deployment parameters associated with a deployment of the SVT engine;

deploy the SVT engine within the distributed technology infrastructure to identify the one or more instances of the first vulnerability based on at least the one or more deployment parameters;

receive, from the user input device, one or more actions to be executed in response to identifying the one or more instances of the first vulnerability within the distributed technology infrastructure;

store the one or more actions in an action repository;

identify the one or more instances of the first vulnerability within the distributed technology infrastructure based on at least deploying the SVT engine within the distributed technology infrastructure;

automatically retrieve, from the action repository, the one or more actions in response to identifying the one or more instances of the first vulnerability; and

execute the one or more actions on the first vulnerability in the one or more instances identified.

9. The computer program product of claim 8 , wherein the SVT engine is platform agnostic.

10. The computer program product of claim 8 , wherein the code further causes the first apparatus to:

receive, via the SVT dashboard, the one or more deployment parameters, wherein the one or more deployment parameters comprises at least information associated a first set of applications within the distributed technology infrastructure; and

deploy the SVT engine to identify the one or more instances of the first vulnerability within the first set of applications within the distributed technology infrastructure.

11. The computer program product of claim 10 , wherein the information associated with the first set of applications comprises at least an application version.

12. The computer program product of claim 8 , wherein the code further causes the first apparatus to:

receive, via the SVT dashboard, the one or more deployment parameters, wherein the one or more deployment parameters comprises at least information associated with one or more software libraries;

determine a second set of applications that are associated with the one or more software libraries; and

deploy the SVT engine to identify the one or more instances of the first vulnerability within the second set of applications within the distributed technology infrastructure.

13. The computer program product of claim 8 , wherein the one or more input parameters comprises at least information associated with the first vulnerability, wherein the information comprises at least one or more known vulnerability signatures associated with the first vulnerability.

14. The computer program product of claim 8 , wherein the one or more actions comprises at least a software patch configured to address the first vulnerability in the one or more instances identified.

15. A method for deployable software vulnerability testing platform, the method comprising:

receiving, from a user input device, an initial request from a user to generate a deployable software vulnerability testing (SVT) engine to identify one or more instances of a first vulnerability within a distributed technology infrastructure;

prompting an SVT dashboard for display on the user input device to receive one or more input parameters associated with the first vulnerability in response to receiving the initial request;

receiving, from the user input device, one or more deployment parameters associated with a deployment of the SVT engine;

deploying the SVT engine within the distributed technology infrastructure to identify the one or more instances of the first vulnerability based on at least the one or more deployment parameters;

receiving, from the user input device, one or more actions to be executed in response to identifying the one or more instances of the first vulnerability within the distributed technology infrastructure;

storing the one or more actions in an action repository;

identifying the one or more instances of the first vulnerability within the distributed technology infrastructure based on at least deploying the SVT engine within the distributed technology infrastructure;

automatically retrieving, from the action repository, the one or more actions in response to identifying the one or more instances of the first vulnerability; and

executing the one or more actions on the first vulnerability in the one or more instances identified.

16. The method of claim 15 , wherein the SVT engine is platform agnostic.

17. The method of claim 15 , further comprising:

receiving, via the SVT dashboard, the one or more deployment parameters, wherein the one or more deployment parameters comprises at least information associated a first set of applications within the distributed technology infrastructure; and

deploying the SVT engine to identify the one or more instances of the first vulnerability within the first set of applications within the distributed technology infrastructure.

18. The method of claim 17 , wherein the information associated with the first set of applications comprises at least an application version.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 21, 2022
From: KURIAN, MANU JACOB; CASTREJON, TOMAS M., III; YOUNG, MICHAEL ROBERT; NARDONI, DAVID; TOWNSEND, JOEL
To: BANK OF AMERICA CORPORATION
Reel/Frame 059323/0711 →
Continuity (1)
Related Publication 20230297689A1 · Sep 21, 2023
Cited By (1)
US 12,682,078