Multi-objective computer infrastructure vulnerability prioritization

Abstract

Techniques are provided for multi-objective computer infrastructure vulnerability prioritization. One method comprises obtaining vulnerabilities associated with computer infrastructure elements; obtaining objectives for ranking the vulnerabilities; determining an initial population of individual solutions for addressing the vulnerabilities, wherein each individual solution comprises a ranked list of vulnerabilities; performing a multi-objective optimization that modifies the initial population of individual solutions to obtain a revised population of individual solutions, wherein each individual solution in the revised population comprises a fitness score and a ranked list of the at least some vulnerabilities; selecting an individual solution in the revised population based on the fitness score; and initiating an automated action to address one or more vulnerabilities in the selected individual solution using the ranked list of at least some vulnerabilities for the selected at least one individual solution.