Patent · US Active

System and method for associating a common vulnerability and exposures (CVE) with a computing device and applying a security patch

US12093396B2 · kind B2 · utility

1Cited by
35References
17Claims
0Family size

Assignee

Inventors

Key dates

Filing dateJul 16, 2020
Grant dateSep 17, 2024
Priority date
Expiry dateMay 29, 2041

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F2221/034
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

A system is configured for associating a CVE with a particular device profile is disclosed. The system receives a request from a user to associate a CVE with a particular device profile. For each device profile from a plurality of device profiles stored in a memory, the system determines feature importance values for features of each device profile. The features of each device profile include at least an operating system and a CPU architecture. The feature importance value of a corresponding feature of a device profile associated with a CVE indicates a probability of the CVE to affect the device profile with respect to that feature. The system identifies a device profile that has features with a total feature importance value above a feature importance threshold value. The system identifies a particular CVE associated with the identified device profile. The system associates the particular CVE with the particular device profile.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.