T-mobile Usa, Inc.

Pradeep Cruz

Yanbing Su

Jan Olav Opedal

Srikrishna Srinivasan

Embodiments include a method for vulnerability management of a computer system. The method includes collecting vulnerability information over a network from a publishing source. The vulnerability information includes a known vulnerability of a first computer asset, where at least some of the vulnerability information is a set of cybersecurity vulnerabilities and exposures (CVEs) published online. Further, at least some of the CVEs is in a human-readable format. The method further includes collecting system information of the computer system subject to the vulnerability management, where the system information includes information about a second computer asset of the computer system. The method further includes processing the collected vulnerability information and the collected system information by interpreting the human-readable CVEs and correlating the interpreted CVEs with the collected system information. A potential vulnerability of the second computer asset is identified based on the correlation between the interpreted CVEs and the collected system information.

Growing community of inventors

Issaquah, WA, United States of America

Pradeep Cruz