Granted Patent B1

US 12,417,288 · App. 18/163,768 · Granted Sep 16, 2025

Inventors: Brian Matthew White (Charlotte, NC); Richard Lee Goble (Lee's Summit, MO); John Masiliunas (Indianapolis, IN); Matthew Thomas McDonald (Callahan, FL); Michael Sbandi (Harrisburg, NC); Jerry Reynolds (Charlotte, NC); Edward J. Patterson (Huntersville, NC)

Assignee: Wells Fargo Bank, N.A.

G06F21/568G06F21/577

Abstract

Claims (55)

1. A method comprising:

obtaining, by a computing system, information associated with one or more software assets, wherein the information associated with one or more software assets comprises information corresponding to one or more stages of a lifecycle of the one or more software assets;

predicting, by the computing system and based on a health score determined from at least a portion of the information associated with the one or more software assets, a security risk of the one or more software assets; and

performing, by the computing system, an action to remediate the predicted security risk of the one or more software assets.

2. The method of claim 1 , wherein the information corresponding to the one or more stages of the lifecycle of the one or more software assets comprises information associated with at least one of:

a development stage of the one or more software assets;

a testing stage of the one or more software assets; or

a maintenance stage of the one or more software assets.

3. The method of claim 1 , wherein the information associated with the one or more software assets comprises one or more of:

information specifying context and operating environment of the one or more software assets;

information about a channel in which the one or more software assets operate;

information that specifies an importance or criticality of the one or more software assets;

information associated with a custodian of the one or more software assets; or

information that specifies a history of attacks and responses to the attacks to the one or more software assets.

4. The method of claim 1 , wherein performing the action to remediate the predicted security risk comprises:

deploying a control that provides run-time capabilities to remediate the predicted security risk.

5. The method of claim 4 , wherein the control comprises a policy or rule.

6. The method of claim 1 , wherein performing the action to remediate the predicted security risk comprises:

generating one or more recommendations to remediate the predicted security risk; and

outputting the one or more recommendations.

7. The method of claim 1 , wherein performing the action to remediate the predicted security risk comprises:

generating a notification specifying the health score; and

outputting the notification.

8. The method of claim 1 , wherein predicting the security risk of the one or more software assets comprises:

applying a machine learning model to the information associated with the one or more software assets; and

receiving an output of the machine learning model indicating the health score.

9. A computing system comprising:

a memory; and

one or more processors in communication with the memory, the one or more processors configured to:

obtain information associated with one or more software assets, wherein the information associated with one or more software assets comprises information corresponding to one or more stages of a lifecycle of the one or more software assets;

predict, based on a health score determined from at least a portion of the information associated with the one or more software assets, a security risk of the one or more software assets; and

perform an action to remediate the predicted security risk of the one or more software assets.

10. The computing system of claim 9 , wherein the information corresponding to the one or more stages of the lifecycle of the one or more software assets comprises information associated with one or more of a development stage, a testing stage, or a maintenance stage of the one or more software assets.

11. The computing system of claim 9 , wherein the information associated with the one or more software assets comprises one or more of:

information specifying context and operating environment of the one or more software assets;

information about a channel in which the one or more software assets operate;

information that specifies an importance or criticality of the one or more software assets;

information associated with a custodian of the one or more software assets; or

information that specifies a history of attacks and responses to the attacks to the one or more software assets.

12. The computing system of claim 9 , wherein to perform the action to remediate the predicted security risk, the one or more processors are configured to:

deploy a control that provides run-time capabilities to remediate the predicted security risk.

13. The computing system of claim 12 , wherein the control comprises a policy or rule.

14. The computing system of claim 9 , wherein to perform the action to remediate the predicted security risk, the one or more processors are configured to:

generate one or more recommendations to remediate the predicted security risk; and

output the one or more recommendations.

15. The computing system of claim 9 , wherein to perform the action to remediate the predicted security risk, the one or more processors are configured to:

generate a notification specifying the health score; and

output the notification.

16. The computing system of claim 9 , wherein to predict the security risk of the one or more software assets, the one or more processors are configured to:

apply a machine learning model to the information associated with the one or more software assets; and

receive an output of the machine learning model indicating the health score.

17. A computer-readable storage medium comprising instructions that, when executed, cause one or more processors to:

obtain information associated with one or more software assets, wherein the information associated with one or more software assets comprises information corresponding to one or more stages of a lifecycle of the one or more software assets;

predict, based on a health score determined from at least a portion of the information associated with the one or more software assets, a security risk of the one or more software assets; and

perform an action to remediate the predicted security risk of the one or more software assets.

Assignments (2)

References Cited (37)