Generating 3-dimensional models and connections to provide vulnerability context
Provided are techniques for generating 3-dimensional (3D) models and connections to provide vulnerability context. For a first vulnerability of a first asset, first vulnerability data comprising first vulnerability attributes is retrieved. A second vulnerability of a second asset is identified based on the second vulnerability having second vulnerability data comprising second vulnerability attributes that include one or more common vulnerability attributes with the first vulnerability attributes. Anchor points for the first vulnerability and the second vulnerability are created based on the one or more common vulnerability attributes. A first 3-dimensional (3D) model is generated for the first vulnerability that incorporates the first vulnerability attributes, and a second 3D model is generated for the second vulnerability that incorporates the second vulnerability attributes. The first 3D model and the second 3D model are displayed with one or more connections based on the anchor points.
1 . A computer-implemented method, comprising operations for:
for a first vulnerability of a first asset, retrieving first vulnerability attributes including a first score for the first vulnerability;
determining one or more common vulnerability attributes between the first vulnerability attributes of the first vulnerability and second vulnerability attributes of a second vulnerability of a second asset including a second score for the second vulnerability using stored vulnerability data;
creating anchor points for the first vulnerability and the second vulnerability based on the one or more common vulnerability attributes;
generating a first 3-dimensional (3D) model for the first vulnerability that incorporates the first vulnerability attributes of the first vulnerability using the anchor points;
generating a second 3D model for the second vulnerability that incorporates the second vulnerability attributes of the second vulnerability using the anchor points;
displaying, in a vulnerability dashboard, the first 3D model and the second 3D model with one or more connections between the anchor points and with the first vulnerability attributes and the second vulnerability attributes; and
in response to receiving input, modifying the displaying of the first 3D model and the second 3D model by moving one of the first 3D model and the second 3D model individually in the vulnerability dashboard.
2 . The computer-implemented method of claim 1 , wherein the first vulnerability attributes and the second vulnerability attributes each include at least one vulnerability attribute selected from a group consisting of: a type of vulnerability, the vulnerability score, a vulnerability source, systems affected, an owner, a vulnerability impact, a patch, a publish date, and remediation actions to take.
3 . The computer-implemented method of claim 1 , wherein the first 3D model incorporating the first vulnerability attributes includes a geometric dimension corresponding to each of the first vulnerability attributes, and wherein a magnitude of each geometric dimension depends on the magnitude of the corresponding first vulnerability attribute.
4 . The computer-implemented method of claim 1 , wherein the second 3D model incorporating the second vulnerability attributes includes a geometric dimension corresponding to each of the second vulnerability attributes, and wherein a magnitude of each geometric dimension depends on the magnitude of the corresponding second vulnerability attribute.
5 . The computer-implemented method of claim 1 , wherein moving at least one of the first 3D model and the second 3D model individually in the vulnerability dashboard comprises individually rotating or individually repositioning.
6 . The computer-implemented method of claim 1 , wherein a third 3D model is generated for a plurality of vulnerabilities.
7 . The computer-implemented method of claim 1 , wherein the first asset and the second asset are each selected from a group consisting of: a hardware asset and a software asset.
8 . A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform operations for:
for a first vulnerability of a first asset, retrieving first vulnerability attributes including a first score for the first vulnerability;
determining one or more common vulnerability attributes between the first vulnerability attributes of the first vulnerability and second vulnerability attributes of a second vulnerability of a second asset including a second score for the second vulnerability using stored vulnerability data;
creating anchor points for the first vulnerability and the second vulnerability based on the one or more common vulnerability attributes;
generating a first 3-dimensional (3D) model for the first vulnerability that incorporates the first vulnerability attributes of the first vulnerability using the anchor points;
generating a second 3D model for the second vulnerability that incorporates the second vulnerability attributes of the second vulnerability using the anchor points;
displaying, in a vulnerability dashboard, the first 3D model and the second 3D model with one or more connections between the anchor points and with the first vulnerability attributes and the second vulnerability attributes; and
in response to receiving input, modifying the displaying of the first 3D model and the second 3D model by moving one of the first 3D model and the second 3D model individually in the vulnerability dashboard.
9 . The computer program product of claim 8 , wherein the first vulnerability attributes and the second vulnerability attributes each include at least one vulnerability attribute selected from a group consisting of: a type of vulnerability, the vulnerability score, a vulnerability source, systems affected, an owner, a vulnerability impact, a patch, a publish date, and remediation actions to take.
10 . The computer program product of claim 8 , wherein the first 3D model incorporating the first vulnerability attributes includes a geometric dimension corresponding to each of the first vulnerability attributes, and wherein a magnitude of each geometric dimension depends on the magnitude of the corresponding first vulnerability attribute.
11 . The computer program product of claim 8 , wherein the second 3D model incorporating the second vulnerability attributes includes a geometric dimension corresponding to each of the second vulnerability attributes, and wherein a magnitude of each geometric dimension depends on the magnitude of the corresponding second vulnerability attribute.
12 . The computer program product of claim 8 , wherein moving at least one of the first 3D model and the second 3D model individually in the vulnerability dashboard comprises individually rotating or individually repositioning.
13 . The computer program product of claim 8 , wherein a third 3D model is generated for a plurality of vulnerabilities.
14 . The computer program product of claim 8 , wherein the first asset and the second asset are each selected from a group consisting of: a hardware asset and a software asset.
15 . A computer system, comprising:
one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; and
program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to perform operations comprising:
for a first vulnerability of a first asset, retrieving first vulnerability attributes including a first score for the first vulnerability;
determining one or more common vulnerability attributes between the first vulnerability attributes of the first vulnerability and second vulnerability attributes of a second vulnerability of a second asset including a second score for the second vulnerability using stored vulnerability data;
creating anchor points for the first vulnerability and the second vulnerability based on the one or more common vulnerability attributes;
generating a first 3-dimensional (3D) model for the first vulnerability that incorporates the first vulnerability attributes of the first vulnerability using the anchor points;
generating a second 3D model for the second vulnerability that incorporates the second vulnerability attributes of the second vulnerability using the anchor points;
displaying, in a vulnerability dashboard, the first 3D model and the second 3D model with one or more connections between the anchor points and with the first vulnerability attributes and the second vulnerability attributes; and
in response to receiving input, modifying the displaying of the first 3D model and the second 3D model by moving one of the first 3D model and the second 3D model individually in the vulnerability dashboard.
16 . The computer system of claim 15 , wherein the first vulnerability attributes and the second vulnerability attributes each include at least one vulnerability attribute selected from a group consisting of: a type of vulnerability, the vulnerability score, a vulnerability source, systems affected, an owner, a vulnerability impact, a patch, a publish date, and remediation actions to take.
17 . The computer system of claim 15 , wherein the first 3D model incorporating the first vulnerability attributes includes a geometric dimension corresponding to each of the first vulnerability attributes, and wherein a magnitude of each geometric dimension depends on the magnitude of the corresponding first vulnerability attribute.
18 . The computer system of claim 15 , wherein the second 3D model incorporating the second vulnerability attributes includes a geometric dimension corresponding to each of the second vulnerability attributes, and wherein a magnitude of each geometric dimension depends on the magnitude of the corresponding second vulnerability attribute.
19 . The computer system of claim 15 , wherein moving at least one of the first 3D model and the second 3D model individually in the vulnerability dashboard comprises individually rotating or individually repositioning.
20 . The computer system of claim 15 , wherein a third 3D model is generated for a plurality of vulnerabilities.