公开(公告)号：US20200228560A1

公开(公告)日：2020-07-16

申请号：US16249226

申请日：2019-01-16

Applicant: VMware, Inc.

Inventor： Varun Murthy ,  Jason Roszak ,  Blake Ryan Watts ,  Matthew Conover ,  Arvind Ahuja

IPC: H04L29/06 ,  G06F21/57 ,  G06F8/65

Abstract: Disclosed are various approaches to automate vulnerability assessment implement policy-based mitigation. A plurality of vulnerability records from respective ones of a plurality of vulnerability feeds are aggregated. Each of the plurality of vulnerability records are stored in a standardized format. A plurality of enterprise-specific severity scores are generated by calculating an enterprise-specific severity score for each of the plurality of vulnerability records. Then, a web page can be created that includes at least a subset of the plurality of enterprise-specific severity scores and respective ones of the plurality of vulnerability records.

公开(公告)号：US11165808B2

公开(公告)日：2021-11-02

申请号：US16249226

申请日：2019-01-16

Applicant: VMware, Inc.

Inventor： Varun Murthy ,  Jason Roszak ,  Blake Ryan Watts ,  Matthew Conover ,  Arvind Ahuja

IPC: G06F21/00 ,  H04L29/06 ,  G06F21/57 ,  G06F8/65

Abstract: Disclosed are various approaches to automate vulnerability assessment implement policy-based mitigation. A plurality of vulnerability records from respective ones of a plurality of vulnerability feeds are aggregated. Each of the plurality of vulnerability records are stored in a standardized format. A plurality of enterprise-specific severity scores are generated by calculating an enterprise-specific severity score for each of the plurality of vulnerability records. Then, a web page can be created that includes at least a subset of the plurality of enterprise-specific severity scores and respective ones of the plurality of vulnerability records.