Computer network security platform
A computer system for managing security information for an organization includes a scanner execution module configured to automatically execute at least two scanners in a predetermined interval to analyze potential vulnerabilities of a computer environment. A vulnerability is acquired from the at least two scanners and stored in a data store. A user associated with the analyzed computer environment is determined based on the vulnerability stored in the data store, the user is notified of the vulnerability.
1. A computer system for managing security information for an organization, comprising:
one or more memories storing instructions; and
one or more processors configured to execute the instructions to perform:
receiving scan data from at least two scanners to analyze potential vulnerabilities of a computer environment associated with the organization;
detecting one or more vulnerabilities from the scan data;
correlating the scan data received from the at least two scanners to determine whether information included in the scan data relates to the same vulnerability;
determining that at least one of the detected vulnerabilities is an excluded vulnerability based on a risk rating of the at least one of the detected vulnerabilities;
determining a user associated with the analyzed computer environment based on the one or more detected vulnerabilities; and
generating a report that includes the one or more detected vulnerabilities but not the excluded vulnerability.
2. The computer system of claim 1 , wherein the one or more processors are further configured to execute the instructions to perform:
generating a user interface that displays vulnerability data, the vulnerability data including trend data representing a total number of vulnerabilities detected in the system at different points in time over a first time period.
3. The computer system of claim 2 , wherein the vulnerability data further includes top vulnerability data representing a group of two or more of the most frequently detected types of vulnerabilities over a second time period.
4. The computer system of claim 1 , wherein the one or more detected vulnerabilities include: a known security issue associated with the computer environment, and a configuration of the computer environment.
5. The computer system of claim 1 , wherein the one or more processors are further configured to execute the instructions to perform:
notifying the user of the one or more detected vulnerabilities by at least one of: an e-mail, a phone call, a voice message, a mobile phone message, and a text message.
6. The computer system of claim 1 , wherein the scan data includes scan data scanned from the at least two scanners over a predetermined interval set by the user.
7. The computer system of claim 1 , wherein the one or more processors are further configured to execute the instructions to perform:
modifying a risk rating associated with the one or more detected vulnerabilities.
8. A computer-implemented method for managing computer security, comprising:
receiving scan data from at least two scanners to analyze potential vulnerabilities of a computer environment associated with an organization;
detecting one or more vulnerabilities from the scan data;
correlating the scan data received from the at least two scanners to determine whether information included in the scan data relates to the same vulnerability;
determining that at least one of the detected vulnerabilities is an excluded vulnerability based on a risk rating of the at least one of the detected vulnerabilities;
determining a user associated with the analyzed computer environment based on the one or more detected vulnerabilities; and
generating a report that includes the one or more detected vulnerabilities but not the excluded vulnerability.
9. The computer-implemented method of claim 8 , further comprising:
generating a user interface that displays vulnerability data, the vulnerability data including trend data representing a total number of vulnerabilities detected in the system at different points in time over a first time period.
10. The computer-implemented method of claim 9 , wherein the vulnerability data further includes top vulnerability data representing a group of two or more of the most frequently detected types of vulnerabilities over a second time period.
11. The computer-implemented method of claim 8 , wherein the one or more detected vulnerabilities include: a known security issue associated with the computer environment, and a configuration of the computer environment.
12. The computer-implemented method of claim 8 , further comprising:
notifying the user of the one or more detected vulnerabilities by at least one of: an e-mail, a phone call, a voice message, a mobile phone message, and a text message.
13. The computer-implemented method of claim 8 , wherein the scan data includes scan data scanned from the at least two scanners over a predetermined interval set by the user.
14. The computer-implemented method of claim 8 , further comprising:
modifying a risk rating associated with the one or more detected vulnerabilities.
15. A computer system for managing security information for an organization, comprising:
one or more memories storing instructions; and
one or more processors configured to execute the instructions to perform:
authenticating a user associated with the organization;
assigning a security responsibility to the user;
specifying preferences for the user;
receiving scan data from at least two scanners to analyze security issues of a computer environment associated with the organization;
detecting one or more vulnerabilities from the scan data;
correlating the scan data received from the at least two scanners to determine whether information included in the scan data relates to the same vulnerability;
determining that at least one of the detected vulnerabilities is an excluded vulnerability based on a risk rating of the at least one of the detected vulnerabilities;
determining a user of a security issue based on the one or more detected vulnerabilities; and
generating a report on the security issue that includes the one or more detected vulnerabilities but not the excluded vulnerability.
16. The computer system of claim 15 , wherein the one or more processors are further configured to execute the instructions to perform:
modifying a risk rating associated with the security issue based on the detected vulnerability.
17. The computer system of claim 15 , wherein authenticating a user includes analyzing government issued digital credentials.
18. The computer system of claim 15 , wherein the one or more processors are further configured to execute the instructions to perform:
displaying a change in a security environment of an organization for a specified time period, based on the security issue.