Patent ID: 9043922
Filing Date: 2015-05-26
Classification: G06F

Abstract:
1. A computer-implemented method for determining malicious-attack exposure levels based on field-data analysis, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: receiving a plurality of attack reports from a plurality of computing systems, wherein at least one attack report within the plurality of attack reports comprises: determining a number of attack reports within the plurality of attack reports that identify the software component; analyzing the plurality of attack reports to determine, based at least in part on the number of attack reports within the plurality of attack reports that identify the software component, a level of exposure to malicious attacks of the software component that reflects a portion of an attack surface of the software component that is actually attacked in the field; making, based at least in part on the level of exposure to malicious attacks of the software component, a security determination related to the software component.