Patent SG-11201900752P-A (SG)
Title: Cybersecurity vulnerability management system and method
Inventor: INAGAKI BRYAN
IPC: G06F11/00
Filed: 2017-07-28
Abstract: PrioritizationImplementation Engine Remediation Engine 150 Cybersecurity Vulnerability Management System 100 Score Calculators 120 Input Processing Engine 110 Score Integration Engine 130 N O cc O C (12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property Organization International Bureau (43) International Publication Date 01 February 2018 (01.02.2018) W I PO I PCT omit VIII °nolo III oloilino 110 Immo oimIE (10) International Publication Number WO 2018/023074 Al (51) International Patent Classification: GOOF 11/00 (2006.01) (21) International Application Number: PCT/US2017/044521 (22) International Filing Date: 28 July 2017 (28.07.2017) (25) Filing Language: English (26) Publication Language: English (30) Priority Data: 62/368,230 29 July 2016 (29.07.2016) US 15/659,744 26 July 2017 (26.07.2017) US (71) Applicant: JPMORGAN CHASE BANK, N.A. [US/US]; 270 Park Avenue, New York, NY 10036 (US). (72) Inventors: INAGAKI, Bryan, S.; 233 Sunnyside Road, West Grove, PA 19390 (US). DAWSON, Martin; 28 Ross- lyn Road, Billericay, Essex CM12 9JN (GB). DORSET, Andrew; 22 Chapel Road, Poole, Dorset BH14 OJU (GB). MURGUEYTIO, Ramiro, R.; 9 Skylar Circle, Media, PA 19063 (US). ROBINSON, David, J.; 84 Countryside Drive, Summit, NJ 07901 (US). VACHHANI, Ajay, D.; 132 Marmora Road, Parsippany, NJ 07054 (US). WASH- BURN, Travis; 7156 Gardenview Court, Chestnut Hill Cove, MD 21226 (US). (74) Agent: OWENS, Kerry et al.; Goodwin Procter LLP, 901 New York Avenue, NW, Washington, DC 20001 (US). (81) Designated States (unless otherwise indicated, for every kind of national protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JO, JP, KE, KG, KH, KN, KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (54) Title: CYBERSECURITY VULNERABILITY MANAGEMENT SYSTEM AND METHOD FIG 2 (57) : A method and system are provided for managing cybersecurity vulnerabilities of resources within at least one network. The method includes collecting data including application risk rank and network location. The method further includes determining a vulnerability score for vulnerabilities of the resources and determining a severity score based on the application risk rank and network location. The method additionally includes integrating the vulnerability score and the severity score to create a two-dimensional risk ranking and prioritizing remediation of the vulnerabilities based on the two-dimensional risk ranking. [Continued on next page] WO 2018/023074 Al MUNRO DOI HONER I 0 10 1101 011110011HINVOIS (84) Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). Published: — with international search report (Art. 21(3))