Computer security vulnerability assessment

1. A method comprising:

receiving, by a computerized system, product binary data and first product identification data that correspond to each other, the product binary data including hashes of strings of bits, bytes, words or characters extracted from files of software products;

receiving, by the computerized system, product vulnerability data and second product identification data that correspond to each other;

determining, by the computerized system, correspondence between the product binary data and the product vulnerability data based on matching the first product identification data with the second product identification data;

generating, by the computerized system, a binaries-to-vulnerabilities database based on the determined correspondence between the product binary data and the product vulnerability data;

scanning, by the computerized system using the binaries-to-vulnerabilities database, target binary data from a target device to find matches between the target binary data and the product binary data; and

determining, by the computerized system, a known security vulnerability of the target device based on 1) results of the scanning and 2) the correspondence between the product binary data and the product vulnerability data.

2. The method of claim 1 , further comprising:

granting, by the computerized system, access by the target device to a secure environment based on determining that the target device has no known security vulnerability; and

denying, by the computerized system, access by the target device to the secure environment based on determining that the target device has the known security vulnerability.

3. The method of claim 1 , wherein:

the product vulnerability data describes a vulnerability to a malicious event of a computer device that contains a software product corresponding to the product binary data, regardless of whether the software product is infected with malicious code.

4. The method of claim 1 , wherein:

the receiving of the product binary data and the first product identification data further comprises collecting, by the computerized system, the product binary data and the first product identification data from a plurality of client devices; and

each client device collects the product binary data and the first product identification data related to software products that are on that client device and maps the product binary data to the corresponding first product identification data for each of the software products.

5. The method of claim 1 , wherein:

the target device is a computer that has been turned off; and

the method further comprises establishing, by the computerized system, a communication connection to the target device by loading the target device as an external storage device of the computerized system.

6. A method comprising:

receiving, by a computerized system, product binary data and first product identification data that correspond to each other by collecting the product binary data and the first product identification data from a plurality of client devices, wherein each client device collects the product binary data and the first product identification data related to software products that are on that client device and maps the product binary data to the corresponding first product identification data for each of the software products, and the product binary data includes hashes of strings of bits, bytes, words or characters extracted from files of software products;

receiving, by the computerized system, product vulnerability data and second product identification data that correspond to each other;

determining, by the computerized system, correspondence between the product binary data and the product vulnerability data based on matching the first product identification data with the second product identification data; and

generating, by the computerized system, a binaries-to-vulnerabilities database based on the determined correspondence between the product binary data and the product vulnerability data;

wherein the binaries-to-vulnerabilities database is used with a scan of target binary data from a target device to determine a known security vulnerability of the target device.

7. The method of claim 6 , further comprising:

scanning, by the computerized system using the binaries-to-vulnerabilities database, the target binary data to find matches between the target binary data and the product binary data; and

determining, by the computerized system, the known security vulnerability of the target device based on 1) results of the scanning and 2) the correspondence between the product binary data and the product vulnerability data.

8. The method of claim 7 , further comprising:

granting, by the computerized system, access by the target device to a secure environment based on determining that the target device has no known security vulnerability; and

denying, by the computerized system, access by the target device to the secure environment based on determining that the target device has the known security vulnerability.

9. The method of claim 6 , wherein:

the product vulnerability data describes a vulnerability to a malicious event of a computer device that contains a software product corresponding to the product binary data, regardless of whether the software product is infected with malicious code.

10. The method of claim 6 , wherein:

the target device is a computer that has been turned off; and

the method further comprises establishing, by the computerized system, a communication connection to the target device by loading the target device as an external storage device of the computerized system.