Fortinet, Inc.

Verizon Patent and Licensing Inc.

David Spencer Tyree

Kurt D'Mello

Sudhir Gandhe

Eric David O'Brien

James E Tomlinson

Yves Van De Weyer

Henk Van Wulpen

A machine-actionable memory comprises one or more machine-actionable records arranged according to a data structure. Such a data structure may include links that respectively map between a remediation, at least one action, and at least two vulnerabilities. A method of selecting a remediation, that is appropriate to a vulnerability which is present on a machine to be remediated, may include: providing a machine-actionable memory as mentioned above; and indexing into the memory using: a given vulnerability identifier to determine (A) at least one of a remediation mapped thereto and (B) at least one action mapped to the given vulnerability identifier; and/or a given remediation to determine at least two vulnerabilities mapped thereto.

Vulnerability-based remediation selection

A device schedules a scan of a group of devices associated with an application network/system, and receives, at a scheduled time, scan information from the group of devices, where the scan information is provided in different formats. The device also converts the scan information, in the different formats, into a single normalized format, and processes the normalized scan information to produce enriched, normalized scan information.

Scalable reusable scanning of application networks/systems

Systems and/or methods include obtaining device information for devices within a network and determining a business function for each of the devices. The systems and/or methods further include assigning a criticality score to each of the devices based on the determined business function and generating a report for the devices based on the determined business function and the assigned criticality score.

Device classification system

A device receives compliance content from a user device, determines requirements associated with the compliance content, and matches the requirements with compliance questions provided in a compliance library associated with the device. The device also automatically generates a compliance questionnaire based on the compliance questions matching the requirements, and provides the compliance questionnaire to the user device. The compliance questionnaire includes a minimum set of compliance questions needed to determine compliance.

Automatically generating compliance questionnaires

A machine-actionable memory comprises one or more machine-actionable records arranged according to a data structure. Such a data structure may include links that respectively map between: a RID field, the contents of which denote an identification (ID) of a remediation (RID); at least one TID field, the contents of which denotes an ID of at least two technologies (TIDs), respectively; and at least one ACTID field, the contents of which denotes an ID of an action (ACTID). A method, of selecting a remediation that is appropriate to a technology present on a machine to be remediated, may include: providing such a machine-actionable memory; and indexing into the memory using a given RID value and a given TID value to determine values of the at-least-one ACTID corresponding to the given RID value and appropriate to the given TID value.

Determining technology-appropriate remediation for vulnerability

A security device may receive information relating to a security event in a customer network. The security device may further determine, in response to receiving the information, a likelihood score that reflects a likelihood that the security event will succeed and an impact score that provides an indication of an impact that the security event will have on the customer network. The security device may also determine a risk score based on the likelihood score and the impact score, where the risk score provides an indication of a risk that the security event will affect the customer network. The security device may provide the risk score to a customer associated with the customer network.

Security handling based on risk management

A first device receives, from a second device, a first request to set up an account, where the first request includes a shared key and information associated with the second device, where the shared key is calculated based on a private key, of a private key/public key pair, and information regarding an identity selection, from user identity information, associated with a user of the second device; and store the shared key in a memory. The first device receives, from the second device, a second request to log in to the account, where the second request includes a first webtoken and information associated with the second device, where the first webtoken is calculated based on the shared key and a first time interval; retrieves the shared key; generates a second webtoken based on the shared key and a second time interval; performs an authentication operation by comparing the first webtoken and the second webtoken; and permits the second device to access the account when the first webtoken matches the second webtoken.

Ubiquitous webtoken

A method of mapping a remediation to a plurality of vulnerabilities may include: assessing susceptibility of an non-remediated machine to a first vulnerability, which results in a first set of two or more vulnerabilities to which the machine is susceptible; implementing the remediation upon the machine; assessing susceptibility of the remediated machine to the first vulnerability, which results in a second set of vulnerabilities to which the machine is susceptible; and creating a machine-actionable map between the remediation and two or more members of the first set based upon differences between the first and second sets.

Growing community of inventors

Centreville, VA, United States of America

David Spencer Tyree