Visa International Service Association

Chintal Vashi

Shashi Velur

Keeshini Manivannan

Karthiga Kengan

Abha Sharma

Apparatuses, methods, and systems are provided for making continuous vulnerability management for modern applications. A dependency tree can be created mapping third-party libraries to microservices used in an application of a software package. Natural language processing can be used on release notes and changelogs of new library versions to generate a list of libraries afflicted with common vulnerabilities and exposures ('CVEs'). A number of code calls from an application program interface ('API') can be made to an afflicted library. A number of code calls including CVEs can be enumerated for each afflicted library. A risk score can be assigned to the API based on the number of code calls including CVEs. The risk score can be compared against a threshold value to cause a remedial action to occur, including updating libraries to newer versions to resolve CVE issues or generating a report regarding the afflicted libraries.

Growing community of inventors

Austin, TX, United States of America

Chintal Vashi