Threat mitigation system and method
A computer-implemented method, computer program product and computing system for: obtaining first system-defined platform information concerning a first security-relevant subsystem within a computing platform; obtaining at least a second system-defined platform information concerning at least a second security-relevant subsystem within the computing platform; combining the first system-defined platform information and the at least a second system-defined platform information to form system-defined consolidated platform information; and generating a security profile based, at least in part, upon the system-defined consolidated platform information.
1. A computer-implemented method for threat mitigation, executed on a computing device, comprising:
obtaining first system-defined platform information concerning a first security-relevant subsystem of a plurality of security-relevant subsystems within a computing platform based upon, at least in part, monitored activity of the first security-relevant subsystem with respect to the computing platform;
obtaining at least second system-defined platform information concerning at least a second security-relevant subsystem of the plurality of security-relevant subsystems within the computing platform based upon, at least in part, monitored activity of the second security-relevant subsystem with respect to the computing platform;
combining the first system-defined platform information and the at least second system-defined platform information to form system-defined consolidated platform information, the system-defined consolidated platform information independently defining the security-relevant subsystems that are present within the computing platform;
obtaining client-defined consolidated platform information from a client information source, the client-defined consolidated platform information identifying the security-relevant subsystems that the client believes are present within the computing platform;
comparing the system-defined consolidated platform information and the client-defined consolidated platform information to define differential consolidated platform information that identifies the difference between the independently identified security-relevant subsystems and the security-relevant subsystems believed to be present by the client; and
presenting the differential consolidated platform information of the computing platform to a third-party.
2. The computer-implemented method of claim 1 further comprising:
generating a security profile based, at least in part, upon the system-defined consolidated platform information.
3. The computer-implemented method of claim 1 wherein the first system-defined platform information and the at least second system-defined platform information are obtained from one or more log files defined for the computing platform.
4. The computer-implemented method of claim 1 wherein the first system-defined platform information and the at least second system-defined platform information are obtained from the first security-relevant subsystem and the at least a second security-relevant subsystem.
5. The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.
6. The computer-implemented method of claim 1 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.
7. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations for threat mitigation, the operations comprising:
obtaining first system-defined platform information concerning a first security-relevant subsystem of a plurality of security-relevant subsystems within a computing platform based upon, at least in part, monitored activity of the first security-relevant subsystem with respect to the computing platform;
obtaining at least second system-defined platform information concerning at least a second security-relevant subsystem of the plurality of security-relevant subsystems within the computing platform based upon, at least in part, monitored activity of the second security-relevant subsystem with respect to the computing platform;
combining the first system-defined platform information and the at least second system-defined platform information to form system-defined consolidated platform information, the system-defined consolidated platform information independently defining the security-relevant subsystems that are present within the computing platform;
obtaining client-defined consolidated platform information from a client information source, the client-defined consolidated platform information identifying the security-relevant subsystems that the client believes are present within the computing platform;
comparing the system-defined consolidated platform information and the client-defined consolidated platform information to define differential consolidated platform information that identifies the difference between the independently identified security-relevant subsystems and the security-relevant subsystems believed to be present by the client; and
presenting the differential consolidated platform information of the computing platform to a third-party.
8. The computer program product of claim 7 further comprising:
generating a security profile based, at least in part, upon the system-defined consolidated platform information.
9. The computer program product of claim 7 wherein the first system-defined platform information and the at least second system-defined platform information are obtained from one or more log files defined for the computing platform.
10. The computer program product of claim 7 wherein the first system-defined platform information and the at least second system-defined platform information are obtained from the first security-relevant subsystem and the at least a second security-relevant subsystem.
11. The computer program product of claim 7 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.
12. The computer program product of claim 7 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.
13. A computing system including a processor and memory configured to perform operations for threat mitigation, the operations comprising:
obtaining first system-defined platform information concerning a first security-relevant subsystem of a plurality of security-relevant subsystems within a computing platform based upon, at least in part, monitored activity of the first security-relevant subsystem with respect to the computing platform;
obtaining at least second system-defined platform information concerning at least a second security-relevant subsystem of the plurality of security-relevant subsystems within the computing platform based upon, at least in part, monitored activity of the second security-relevant subsystem with respect to the computing platform;
combining the first system-defined platform information and the at least second system-defined platform information to form system-defined consolidated platform information, the system-defined consolidated platform information independently defining the security-relevant subsystems that are present within the computing platform;
obtaining client-defined consolidated platform information from a client information source, the client-defined consolidated platform information identifying the security-relevant subsystems that the client believes are present within the computing platform;
comparing the system-defined consolidated platform information and the client-defined consolidated platform information to define differential consolidated platform information that identifies the difference between the independently identified security-relevant subsystems and the security-relevant subsystems believed to be present by the client; and
presenting the differential consolidated platform information of the computing platform to a third-party.
14. The computing system of claim 13 further comprising:
generating a security profile based, at least in part, upon the system-defined consolidated platform information.
15. The computing system of claim 13 wherein the first system-defined platform information and the at least second system-defined platform information are obtained from one or more log files defined for the computing platform.
16. The computing system of claim 13 wherein the first system-defined platform information and the at least second system-defined platform information are obtained from the first security-relevant subsystem and the at least a second security-relevant subsystem.
17. The computing system of claim 13 wherein the client-defined consolidated platform information is obtained from one or more client-completed questionnaires.
18. The computing system of claim 13 wherein the client-defined consolidated platform information is obtained from one or more client-deployed platform monitors.