Patent ID: 11966475
Assignee: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A method comprising:
accessing an input representing a software component list for a software product, wherein the software component list contains information for a given software component;
accessing a knowledge base to determine at least some security level parameters and trust parameters for the given software component based on the information, wherein:
the trust parameters represent at least one of whether the source code is signed, whether there is support for a secure download connection, or whether a community associated with the software component is obsolete; and
at least one parameter of the security level parameters and the trust parameters is unavailable;

applying a machine learning classifier to infer the at least one parameter;
determining a security level of the given software component based on an evaluation of the security level parameters;
determining a trust of a source of the given software component based on an evaluation of the trust parameters;
determining a security context of the software product; and
based on the security level, the trust and the security context, providing a recommendation for the given software component.