Patent ID: 7278163
Filing Date: 2007-10-02
Classification: G06F,G06Q,H04L

Abstract:
1. A method for assessing risk in executing vulnerability remediations to a computer network, comprising: identifying at least one human factor related to a risk posed by each of one or more individuals that have access to a portion of the computer network; determining one of a plurality of levels of risk for each of the individuals using at least one human factor, wherein determining the level of risk for each individual further comprises calculating a risk score for a plurality of vulnerability remediations to be considered for application to the portion of the computer network based at least in part on the levels of risk for each individual that has access to the portion of the computer network; selecting at least one of the vulnerability remediations to execute based at least in part on the relative risk scores of the plurality of vulnerability remediations considered; and executing the selected vulnerability remediations on the portion of the computer network.