International Business Machines Corporation

Muhammed Faith Bulut

Constantin Mircea Adam

Daby Mousse Sow

Steven Ocepek

Abdulhamid Adebowale Adebayo

Ting Dai

Lilian Mathias Ngweta

An apparatus, a method, and a computer program product are provided that combine policy compliance with vulnerability management to provide a more accurate risk assessment of an environment. The method includes training a policy machine learning model using a first training dataset to generate a policy machine learning model to produce mitigation technique classifications and training a vulnerability machine learning model using a second training dataset to generate a vulnerability machine learning model to produce weakness type classifications. The method also includes mapping the mitigation technique classifications to attack techniques to produce a policy mapping and mapping the weakness type classifications to the attack techniques to produce a vulnerability mapping. The method further includes producing a risk assessment of a vulnerability based on the policy mapping and the vulnerability mapping.

Growing community of inventors

West Greenwich, RI, United States of America

Muhammed Faith Bulut