Threat mitigation system and method
A computer-implemented method, computer program product and computing system for: establishing connectivity with a plurality of security-relevant subsystems within a computing platform; and mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
1. A computer-implemented method, executed on a computing device, comprising:
establishing connectivity with a plurality of security-relevant subsystems within a computing platform;
mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems;
defining a unified query on a unified platform concerning the plurality of security-relevant subsystems; and
denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining a plurality of subsystem-specific queries.
2. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields within a query structure of the unified platform to one or more data fields within a query structure of each of the plurality of security-relevant subsystems.
3. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields within a result set structure of each of the plurality of security-relevant subsystems to one or more data fields within a result set structure of the unified platform.
4. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems at a defined periodicity.
5. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
proactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
6. The computer-implemented method of claim 1 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
reactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
7. The computer-implemented method of claim 1 further comprising:
providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.
8. The computer-implemented method of claim 7 further comprising:
receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.
9. The computer-implemented method of claim 8 further comprising:
normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set.
10. The computer-implemented method of claim 9 further comprising:
providing the unified result set to a third-party.
11. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
establishing connectivity with a plurality of security-relevant subsystems within a computing platform;
mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems;
defining a unified query on a unified platform concerning the plurality of security-relevant subsystems; and
denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining a plurality of subsystem-specific queries.
12. The computer program product of claim 11 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields within a query structure of the unified platform to one or more data fields within a query structure of each of the plurality of security-relevant subsystems.
13. The computer program product of claim 11 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields within a result set structure of each of the plurality of security-relevant subsystems to one or more data fields within a result set structure of the unified platform.
14. The computer program product of claim 11 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems at a defined periodicity.
15. The computer program product of claim 11 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
proactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
16. The computer program product of claim 11 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
reactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
17. The computer program product of claim 11 further comprising:
providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.
18. The computer program product of claim 17 further comprising:
receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.
19. The computer program product of claim 18 further comprising:
normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set.
20. The computer program product of claim 19 further comprising:
providing the unified result set to a third-party.
21. A computing system including a processor and memory configured to perform operations comprising:
establishing connectivity with a plurality of security-relevant subsystems within a computing platform;
mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems;
defining a unified query on a unified platform concerning the plurality of security-relevant subsystems; and
denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining a plurality of subsystem-specific queries.
22. The computing system of claim 21 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields within a query structure of the unified platform to one or more data fields within a query structure of each of the plurality of security-relevant subsystems.
23. The computing system of claim 21 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields within a result set structure of each of the plurality of security-relevant subsystems to one or more data fields within a result set structure of the unified platform.
24. The computing system of claim 21 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems at a defined periodicity.
25. The computing system of claim 21 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
proactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
26. The computing system of claim 21 wherein mapping one or more data fields of a unified platform to one or more data fields of each of the plurality of security-relevant subsystems includes:
reactively mapping one or more data fields of the unified platform to one or more data fields of each of the plurality of security-relevant subsystems.
27. The computing system of claim 21 further comprising:
providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.
28. The computing system of claim 27 further comprising:
receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.
29. The computing system of claim 28 further comprising:
normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set.
30. The computing system of claim 29 further comprising:
providing the unified result set to a third-party.