Dynamic approach to real-time cve/cwe analysis during cybersecurity threat analysis and risk assessment (tara)

Abstract

Apparatus and methods for updating a computer system security analysis framework and performing a vulnerability analysis. One example apparatus includes an electronic processor configured to identify one or more assets associated with a security analysis target that includes a security analysis framework by scanning a target system architecture and a plurality of security-relevant components. The security analysis target is operated using the target system architecture. The electronic processor is configured to execute a large language model to process the identified assets by generating a search pattern based on a technical context of the identified one or more assets, selecting a relevant vulnerability based on the search pattern, and determining a mitigation strategy based on the relevant vulnerability. The electronic processor updates the security analysis framework by adding the relevant vulnerability and the mitigation strategy into the security analysis framework.