Mcafee, Inc.

Brian Michael Kenyon

George Robert Kurtz

David Michael Cole

Stuart McClure

Ken D Saruwatari

Roberto Ramon Garcia

Thomas Gregory Cummings

Christopher William Moore

Steven G Andres

Michael J O'Dea

A security risk management system comprises a vulnerability database, an asset database, a local threat intelligence database and a threat correlation module. The vulnerability database comprises data about security vulnerabilities of assets on a network gathered using active or passive vulnerability assessment techniques. The asset database comprises data concerning attributes of each asset. The threat correlation module receives threat intelligence alerts that identify attributes and vulnerabilities associated with security threats that affect classes of assets. The threat correlation module compares asset attributes and vulnerabilities with threat attributes and vulnerabilities and displays a list of assets that are affected by a particular threat. The list can be sorted according to a calculated risk score, allowing an administrator to prioritize preventive action and respond first to threats that affect higher risk assets. The security risk management system provides tools for performing preventive action and for tracking the success of preventive action.

System and method of managing network security risks

Growing community of inventors

Aliso Viejo, CA, United States of America

Brian Michael Kenyon