Patent ID: 11947679
Assignee: JPMORGAN CHASE BANK, N.A.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 9:
10. A system for managing vulnerability data, comprising:
a data ingestion engine configured to ingest vulnerability data from a plurality of sources;
a data normalizer module configured to normalize the vulnerability data into a plurality of data records, each data record having a predefined format and a plurality of pre-defined fields;
a data processing module configured to de-duplicate the data records and to generate a dynamic risk score for each de-duplicated data record, wherein the dynamic risk score is based on one or more rules;
a risk record register configured to store a risk record for each de-duplicated data record, wherein the risk record comprises the dynamic risk score, a priority level, an identifier for a software application, and a software dependency; and
a control policy selection engine configured to select a control policy based on one of the dynamic risk scores, wherein the risk record register is configured to implement the selected control policy, monitor implementation of the control policy, and update the control policy selection engine based on the monitoring.