Servicenow, Inc.

Volodymyr Osypov

Kurt Joseph Zettel, Ii

Mark Cornell Manning

Richard Kenneth Reybok

Jeffrey Rhines

Henry Geddes

Scott Lewis

Sean Brady

Andreas Seip Haugsnes

Lisa Sherilyn Henderson

Phillip DiCorpo

Xuchang Chen

Karan Shah

Jerome Liu

Andreis Seip Haugsnes

Ii Kurt Joseph Zettel

Phillip Dicorpo

This disclosure provides techniques for pooling and searching network security events reported by multiple sources. As information representing a security event is received from one source, it is searched against a central or distributed database representing events reported from multiple, diverse sources (e.g., different client networks). Either the search or correlated results can be filtered and/or routed according at least one characteristic associated with the networks, for example, to limit correlation to events reported by what are presumed to be similarly situated networks. The disclosed techniques facilitate faster identification of high-relevancy security event information, and thereby help facilitate faster threat identification and mitigation. Various techniques can be implemented as standalone software (e.g., for use by a private network) or for a central pooling and/or query service. This disclosure also provides different examples of actions that can be taken in response to search results.

Techniques for sharing network security event information

Systems and methods for automatically grouping vulnerabilities into vulnerability groups are provided. Vulnerabilities are received in the vulnerability response system and are automatically grouped into one or more vulnerability groups based upon grouping fields defined in a vulnerability group rule.

Automated vulnerability grouping

Growing community of inventors

Mountain View, CA, United States of America

Volodymyr Osypov