Patent ID: 9298927
Filing Date: 2016-03-29
CPC Classification: G06F,H04L

Claim Text:
1. A system for providing an efficient vulnerability management and verification service comprising: at least one processor; and at least one memory coupled to the at least one processor, the at least one memory unit having stored therein instructions which when executed by any set of the one or more processors, perform a process for providing an efficient vulnerability management and verification service, the process for providing an efficient vulnerability management and verification service including: identifying a virtual asset creation template, wherein the virtual asset creation template is associated with a class of virtual assets, wherein the virtual asset creation template is used to create each virtual asset of the class of virtual assets; obtaining virtual asset creation template data representing the virtual asset creation template, wherein at least part of the virtual asset creation template data includes steps, instructions, and/or operations used to create each virtual asset of the class of virtual assets; analyzing the virtual asset creation template data to identify any vulnerabilities in the virtual asset creation template data; if one or more vulnerabilities are identified in the virtual asset creation template data, creating a remedied virtual asset creation template by applying to the virtual asset creation template a remedy to each vulnerability identified in the virtual asset creation template data; generating one or more virtual assets using the virtual asset creation template; if no vulnerability is identified in the virtual asset creation template data, or each vulnerability identified in the virtual asset creation template data is remedied, transforming an initial status of each virtual asset of the virtual asset class generated using the virtual asset creation template to an initial status of verified; monitoring the verified virtual assets of the virtual asset class generated using the virtual asset creation template to detect any changes made to any of the monitored verified virtual assets; if a change in a monitored verified virtual asset is detected, transforming the status of the changed monitored verified virtual asset to a status of unverified; analyzing the unverified virtual asset to identify any vulnerabilities in the unverified virtual asset; if one or more vulnerabilities are identified in the unverified virtual asset, applying a remedy to each vulnerability identified in the unverified virtual asset; and if no vulnerability is identified in the unverified virtual asset, or each vulnerability identified in the unverified virtual asset is remedied, transforming the status of the unverified virtual asset to a status of verified.