IP Library Granted Patent US 11,120,139
Granted Patent B2
US 11,120,139 · App. 16/445,732 · Granted Sep 14, 2021

Cybersecurity vulnerability management based on application rank and network location

Inventors: Bryan S. Inagaki (West Grove, PA); Martin Dawson (Essex, GB); Andrew Graham (Dorset, GB); Ramiro Rodney Murgueytio (Media, PA); David J. Robinson (Summit, NJ); Ajay D. Vachhani (Parsippany, NJ); Travis Washburn (Chestnut Hill Cove, MD)
Assignee: JPMORGAN CHASE BANK, N.A.
G06F21/577G06F3/04817G06Q10/0635H04L63/1433G06F2221/2111
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,120,139
App. No.
16/445,732
Granted
Sep 14, 2021
Kind
B2
Abstract

A method and system are provided for managing cybersecurity vulnerabilities of resources within at least one network. The method includes collecting data including application risk rank and network location. The method further includes determining a vulnerability score for vulnerabilities of the resources and determining severity score based on the application risk rank and network location. The method additionally includes integrating the vulnerability score and the severity score to create a two-dimensional risk ranking.

Claims (37)

1. A computer-implemented method for managing cybersecurity vulnerabilities of resources within at least one network, the method comprising:

utilizing the at least one processor to manage cybersecurity vulnerabilities within a network by performing operations including:

determining vulnerability scores corresponding to vulnerabilities of multiple network resources;

determining severity scores for the network resources based on application risk rank and network location of the network resources;

integrating each vulnerability score and a corresponding severity score for the network resources to create a two-dimensional risk ranking enabling visualization and characterization of resource vulnerabilities for the network resources connected over the network;

prioritizing remediation of the vulnerabilities within the network based on the two dimensional risk ranking having an x axis and a y axis, wherein in the two-dimensional risk ranking, the severity scores are represented along the x axis and the vulnerability scores are represented along the y axis;

calculating a vulnerability index as a weighted sum of vulnerabilities associated with an application and host; and

generating a user interface displaying a comparison of an infrastructure vulnerability index and an application vulnerability index.

2. The method of claim 1 , further comprising scheduling remediation of vulnerabilities based on the two-dimensional risk ranking.

3. The method of claim 1 , further comprising providing a user interface facilitating one-click generation of the prioritized remediation list based on the two-dimensional risk ranking.

4. The method of claim 1 , further comprising matching a vulnerability on the remediation list with a pre-determined patch for remediating the vulnerability.

5. The method of claim 4 , further comprising automatically applying the patch to impacted network hosts.

6. The method of claim 1 , wherein determining severity scores comprises determining a weight associated with a risk rank and a weight associated with a network location and summing the weights to calculate a total severity weight.

7. The method of claim 6 , further comprising associating the total severity weight with a corresponding severity score.

8. The method of claim 1 , further comprising generating a user interface displaying network hosts impacted by a selected vulnerability.

9. A cybersecurity vulnerability management system operating within at least one network, the system comprising:

at least one computer memory storing instructions;

at least one computer processor accessing the stored instructions for performing steps including:

determining vulnerability scores corresponding to vulnerabilities of network resources within a network;

determining severity scores for the network resources based on application risk rank and network location of the network resources;

integrating each vulnerability score and a corresponding severity score to create a two-dimensional risk ranking enabling visualization and characterization of resource vulnerabilities for the network resources connected over the network;

prioritizing remediation of the vulnerabilities within the network based on the two dimensional risk ranking having an x axis and a y axis, wherein in the two-dimensional risk ranking, the severity scores are represented along the x axis and the vulnerability scores are represented along they axis; and

calculating a vulnerability index as a weighted sum of vulnerabilities associated with an application and host; and

generating a user interface displaying a comparison of an infrastructure vulnerability index and an application vulnerability index.

10. The system of claim 9 , further comprising scheduling remediation of vulnerabilities based on the two-dimensional risk ranking.

11. The system of claim 9 , wherein a prioritization implementation engine generates a user-interface facilitating one-click generation of the prioritized remediation list based on the two-dimensional risk ranking.

12. The system of claim 9 , further comprising a remediation engine matching a vulnerability on the remediation list with a pre-determined patch for remediating the vulnerability.

13. The system of claim 12 , wherein the remediation engine automatically applies the patch to prioritized impacted network hosts.

14. The system of claim 9 , wherein a severity score calculator determines severity scores by determining a weight associated with a risk rank and a weight associated with a network location and summing the weights to calculate a total severity weight.

15. The system of claim 14 , wherein the severity score calculator associates the total severity weight with a corresponding severity score.

16. A non-transitory computer-readable medium, executed by a processor for managing cybersecurity vulnerabilities of resources within at least one network by performing steps including:

determining vulnerability scores corresponding to vulnerabilities of network resources within a network;

determining severity scores for the network resources based on application risk rank and network location; and

integrating the vulnerability score and the severity score to create a two-dimensional risk ranking enabling visualization and characterization of resource vulnerabilities for the network resources connected over the network;

prioritizing remediation of the vulnerabilities within the network based on the two dimensional risk ranking having an x axis and a y axis, wherein in the two-dimensional risk ranking, the severity scores are represented along the x axis and the vulnerability scores are represented along they axis; and

calculating a vulnerability index as a weighted sum of vulnerabilities associated with an application and host; and

generating a user interface displaying a comparison of an infrastructure vulnerability index and an application vulnerability index.

Continuity (3)
Continuation 15659744 · Jul 26, 2017
Provisional Application 62368230 · Jul 29, 2016
Related Publication 20190362078A1 · Nov 28, 2019