Patent ID: 8819655
Filing Date: 2014-08-26
Classification: G06F

Abstract:
1. A computer-implemented method comprising: detecting, at a computing device that comprises at least one processor, an installation of a computer program onto the computing device; in response to detecting the installation of the computer program, determining, by causing the computing device to automatically conduct a patch analysis for the computer program, that the computer program is missing at least one applicable patch; determining, based on the results of the patch analysis, that the computer program is vulnerable, wherein: the computer program is determined to be vulnerable based on the at least one applicable patch being associated with a predetermined classification that indicates that the applicable patch is at least one of critical, mandatory, and recommended; an administrator causes the predetermined classification to signify vulnerability; in response to the determination that the computer program is vulnerable, blocking the computer program from executing on the computing device; while the computer program is blocked from executing on the computing device, iteratively identifying and applying at least one applicable patch to the computer program until the computer program is no longer vulnerable; upon determining that the computer program is no longer vulnerable, allowing the computer program to execute on the computing device.