Threat mitigation system and method

Patent metadata

Field	Value
Publication number	US-11637847-B2
Application number	US-202117337132-A
Country	US
Kind code	B2
Filing date	Jun 2, 2021
Priority date	Jun 6, 2018
Publication date	Apr 25, 2023
Grant date	Apr 25, 2023

Abstract

A computer-implemented method, computer program product and computing system for: obtaining system-defined consolidated platform information for a computing platform from an independent information source; obtaining client-defined consolidated platform information for the computing platform from a client information source; and comparing the system-defined consolidated platform information to the client-defined consolidated platform information to define differential consolidated platform information for the computing platform.

First claim

What is claimed is:

1. A computer-implemented method, executed on a computing device, comprising:
obtaining consolidated platform information for a computing platform;
analyzing the consolidated platform information to evaluate one or more current security relevant capabilities for the computer platform;
identifying one or more security assets which are available but not utilized by the computing platform including one or more of: features of the one or more security assets that are available but not utilized, features of the one or more security assets that are available but disabled, and expanded features of the one or more security assets;
determining possible security-relevant capabilities for the computing platform, wherein the possible security-relevant capabilities accounts for the one or more security assets which are available but not utilized by the computing platform;
generating comparison information that compares the current security-relevant capabilities of the computing platform to the possible security-relevant capabilities of the computing platform to identify security-relevant deficiencies; and
generating a list of at least a portion of the one or more security assets that are available but not utilized by the computing platform to address at least a portion of the security-relevant deficiencies.

2. The computer-implemented method of claim 1 , wherein generating the list of the at least a portion of the one or more security assets includes:
generating a list of ranked and recommended security assets that ranks the one or more available but not utilized security assets.

3. The computer-implemented method of claim 2 wherein generating the list of ranked and recommended security assets that ranks the one or more available but not utilized security assets includes:
ranking the one or more security assets based upon the anticipated use of the one or more security assets.

4. The computer-implemented method of claim 1 , further comprising providing the ability/option to implement one or more security assets which are available but not utilized by the computing platform.

5. The computer-implemented method of claim 1 , wherein identifying the one or more security assets which are available but not utilized includes:
utilizing artificial intelligence/machine learning to process the consolidated platform information to identify the one or more security assets which are available but not utilized.

6. The computer-implemented method of claim 1 , wherein the consolidated platform information includes client-defined consolidated platform information.

7. The computer-implemented method of claim 1 , wherein the consolidated platform information is received from a client, the client including one or more of a user, an owner, and an operator of the computing platform.

8. The computer-implemented method of claim 1 , wherein one or more of the current security-relevant capabilities and the possible security-relevant capabilities are provided by one or more of Content Delivery Network (CDN) systems; Database Activity Monitoring (DAM) systems; User Behavior Analytics (UBA) systems; Mobile Device Management (MDM) systems; Identity and Access Management (IAM) systems; Domain Name Server (DNS) systems, antivirus systems, operating systems, data lakes; data logs; security-relevant software applications; security-relevant hardware systems; and resources external to the computing platform.

9. The computer-implemented method of claim 1 , further including:
determining comparative platform information that identifies security-relevant capabilities for a comparative platform, wherein the comparative platform concerns one or more vendor customers.

10. The computer-implemented method of claim 9 , further including:
providing a score for the computing platform based upon, at least in part, the current security-relevant capabilities; and
providing a score based upon, at least in part, the security-relevant capabilities for the comparative platform.

11. The computer-implemented method of claim 10 , wherein the comparative platform information concerns vendor customers in a specific industry.

12. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon, which, when executed by a processor, cause the processor to perform operations comprising:
obtaining consolidated platform information for a computing platform;
analyzing the consolidated platform information to evaluate one or more current security relevant capabilities for the computer platform;
identifying one or more security assets which are available but not utilized by the computing platform including one or more of: features of the one or more security assets that are available but not utilized, features of the one or more security assets that are available but disabled, and expanded features of the one or more security assets;
determining possible security-relevant capabilities for the computing platform, wherein the possible security-relevant capabilities accounts for the one or more security assets which are available but not utilized by the computing platform;
generating comparison information that compares the current security-relevant capabilities of the computing platform to the possible security-relevant capabilities of the computing platform to identify security-relevant deficiencies; and
generating a list of at least a portion of the one or more security assets that are available but not utilized by the computing platform to address at least a portion of the security-relevant deficiencies.

13. The computer program product of claim 12 , wherein generating the list of the at least a portion of the one or more security assets includes:
generating a list of ranked and recommended security assets that ranks the one or more available but not utilized security assets.

14. The computer program product of claim 13 wherein generating the list of ranked and recommended security assets that ranks the one or more available but not utilized security assets includes:
ranking the one or more security assets based upon the anticipated use of the one or more security assets.

15. The computer program product of claim 12 , further comprising instructions for providing the ability/option to implement one or more security assets which are available but not utilized by the computing platform.

16. The computer program product of claim 12 , wherein identifying the one or more security assets which are available but not utilized includes:
utilizing artificial intelligence/machine learning to process the consolidated platform information to identify the one or more security assets which are available but not utilized.

17. The computer program product of claim 12 , wherein the consolidated platform information includes client-defined consolidated platform information.

18. The computer program product of claim 12 , wherein the consolidated platform information is received from a client, the client including one or more of a user, an owner, and an operator of the computing platform.

19. The computer program product of claim 12 , wherein one or more of the current security-relevant capabilities and the possible security-relevant capabilities are provided by one or more of Content Delivery Network (CDN) systems; Database Activity Monitoring (DAM) systems; User Behavior Analytics (UBA) systems; Mobile Device Management (MDM) systems;
Identity and Access Management (IAM) systems; Domain Name Server (DNS) systems, antivirus s

Assignees

• Reliaquest Holdings Llc

Inventors

• Murphy Brian P
• Partlow Joe
• O'Connor Colin
• Pfeiffer Jason

Classifications

• G06F18/214

  Generating training patterns; Bootstrap methods, e.g. bagging or boosting · CPC title

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F21/56

  Computer malware detection or handling, e.g. anti-virus arrangements · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• G06F21/55

  Detecting local intrusion or implementing counter-measures · CPC title