Predicting Exploitability of Software Vulnerabilities and Recommending Alternate Software Packages

Identifying and evaluating exploitability of software vulnerabilities is provided. A vulnerability identified and a level of exploitability of the vulnerability corresponding to a software package is evaluated prior to installation of the software package on a data processing system based on data co...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Mishra, Lawang, Rao, Shruthi Rs, Seshagiri, Sudhakar T, Goyal, Payas
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title
container_volume
creator Mishra, Lawang
Rao, Shruthi Rs
Seshagiri, Sudhakar T
Goyal, Payas
description Identifying and evaluating exploitability of software vulnerabilities is provided. A vulnerability identified and a level of exploitability of the vulnerability corresponding to a software package is evaluated prior to installation of the software package on a data processing system based on data collected from a plurality of software vulnerability data sources. Related alternative software packages corresponding to the software package to be installed on the data processing system are identified based on a comparative analysis between alternative software packages and the software package. A confidence level is determined for each respective related alternative software package for resolving the level of exploitability. The related alternative software packages are ranked from least to most vulnerable based on a calculated exploitability score corresponding to each respective related alternative software package. Insights are generated based on determined confidence levels and rankings corresponding to calculated exploitability scores of the related alternative software packages.
format Patent
fullrecord <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_US2021216643A1</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>US2021216643A1</sourcerecordid><originalsourceid>FETCH-epo_espacenet_US2021216643A13</originalsourceid><addsrcrecordid>eNqNi7EKwjAYBrM4iPoOAWfBttK9lIpjsepa_iZfSzBNSvKL-vYiCq5ON9zdXHR1gDaKjRtk9ZisN0ydsYaf0vey8T3fKUBebtYhfIxBlOS0PEL5cYTT77ewjOCI8XtqUlcaEJdi1pONWH25EOt9dSoPG0y-RZxIwYHbc5Nu0yRN8nyXFUn2X_UCrJA_lg</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Predicting Exploitability of Software Vulnerabilities and Recommending Alternate Software Packages</title><source>esp@cenet</source><creator>Mishra, Lawang ; Rao, Shruthi Rs ; Seshagiri, Sudhakar T ; Goyal, Payas</creator><creatorcontrib>Mishra, Lawang ; Rao, Shruthi Rs ; Seshagiri, Sudhakar T ; Goyal, Payas</creatorcontrib><description>Identifying and evaluating exploitability of software vulnerabilities is provided. A vulnerability identified and a level of exploitability of the vulnerability corresponding to a software package is evaluated prior to installation of the software package on a data processing system based on data collected from a plurality of software vulnerability data sources. Related alternative software packages corresponding to the software package to be installed on the data processing system are identified based on a comparative analysis between alternative software packages and the software package. A confidence level is determined for each respective related alternative software package for resolving the level of exploitability. The related alternative software packages are ranked from least to most vulnerable based on a calculated exploitability score corresponding to each respective related alternative software package. Insights are generated based on determined confidence levels and rankings corresponding to calculated exploitability scores of the related alternative software packages.</description><language>eng</language><subject>CALCULATING ; COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2021</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20210715&amp;DB=EPODOC&amp;CC=US&amp;NR=2021216643A1$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,780,885,25564,76547</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20210715&amp;DB=EPODOC&amp;CC=US&amp;NR=2021216643A1$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>Mishra, Lawang</creatorcontrib><creatorcontrib>Rao, Shruthi Rs</creatorcontrib><creatorcontrib>Seshagiri, Sudhakar T</creatorcontrib><creatorcontrib>Goyal, Payas</creatorcontrib><title>Predicting Exploitability of Software Vulnerabilities and Recommending Alternate Software Packages</title><description>Identifying and evaluating exploitability of software vulnerabilities is provided. A vulnerability identified and a level of exploitability of the vulnerability corresponding to a software package is evaluated prior to installation of the software package on a data processing system based on data collected from a plurality of software vulnerability data sources. Related alternative software packages corresponding to the software package to be installed on the data processing system are identified based on a comparative analysis between alternative software packages and the software package. A confidence level is determined for each respective related alternative software package for resolving the level of exploitability. The related alternative software packages are ranked from least to most vulnerable based on a calculated exploitability score corresponding to each respective related alternative software package. Insights are generated based on determined confidence levels and rankings corresponding to calculated exploitability scores of the related alternative software packages.</description><subject>CALCULATING</subject><subject>COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2021</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNqNi7EKwjAYBrM4iPoOAWfBttK9lIpjsepa_iZfSzBNSvKL-vYiCq5ON9zdXHR1gDaKjRtk9ZisN0ydsYaf0vey8T3fKUBebtYhfIxBlOS0PEL5cYTT77ewjOCI8XtqUlcaEJdi1pONWH25EOt9dSoPG0y-RZxIwYHbc5Nu0yRN8nyXFUn2X_UCrJA_lg</recordid><startdate>20210715</startdate><enddate>20210715</enddate><creator>Mishra, Lawang</creator><creator>Rao, Shruthi Rs</creator><creator>Seshagiri, Sudhakar T</creator><creator>Goyal, Payas</creator><scope>EVB</scope></search><sort><creationdate>20210715</creationdate><title>Predicting Exploitability of Software Vulnerabilities and Recommending Alternate Software Packages</title><author>Mishra, Lawang ; Rao, Shruthi Rs ; Seshagiri, Sudhakar T ; Goyal, Payas</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_US2021216643A13</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>eng</language><creationdate>2021</creationdate><topic>CALCULATING</topic><topic>COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>Mishra, Lawang</creatorcontrib><creatorcontrib>Rao, Shruthi Rs</creatorcontrib><creatorcontrib>Seshagiri, Sudhakar T</creatorcontrib><creatorcontrib>Goyal, Payas</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>Mishra, Lawang</au><au>Rao, Shruthi Rs</au><au>Seshagiri, Sudhakar T</au><au>Goyal, Payas</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Predicting Exploitability of Software Vulnerabilities and Recommending Alternate Software Packages</title><date>2021-07-15</date><risdate>2021</risdate><abstract>Identifying and evaluating exploitability of software vulnerabilities is provided. A vulnerability identified and a level of exploitability of the vulnerability corresponding to a software package is evaluated prior to installation of the software package on a data processing system based on data collected from a plurality of software vulnerability data sources. Related alternative software packages corresponding to the software package to be installed on the data processing system are identified based on a comparative analysis between alternative software packages and the software package. A confidence level is determined for each respective related alternative software package for resolving the level of exploitability. The related alternative software packages are ranked from least to most vulnerable based on a calculated exploitability score corresponding to each respective related alternative software package. Insights are generated based on determined confidence levels and rankings corresponding to calculated exploitability scores of the related alternative software packages.</abstract><oa>free_for_read</oa></addata></record>
fulltext fulltext_linktorsrc
identifier
ispartof
issn
language eng
recordid cdi_epo_espacenet_US2021216643A1
source esp@cenet
subjects CALCULATING
COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
title Predicting Exploitability of Software Vulnerabilities and Recommending Alternate Software Packages
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-18T18%3A19%3A02IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=Mishra,%20Lawang&rft.date=2021-07-15&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3EUS2021216643A1%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true