Corey D Thomas

US Patent:

20110191854, Aug 4, 2011

Filed:

Mar 30, 2010

Appl. No.:

12/750031

Inventors:

Anastasios Giakouminakis - Los Angeles CA, US
Chad Loder - Los Angeles CA, US
Corey E. Thomas - Boston MA, US
H. D. Moore - Austin TX, US

International Classification:

G06F 21/00

US Classification:

726 25

Abstract:

A security tool can identify vulnerabilities in a computing system and determine a risk level of the vulnerabilities. The security tool can determine the risk level based on exploits associated with the vulnerabilities. The security tool can determine the risk level based on factors associated with the exploits such as whether an exploit exists, a rank of the exploit, a number of exploits that exist for the vulnerability, a difficulty to identify whether the exploit exists, and an effect of the exploit on the vulnerability. The security tool can a report identifying the vulnerabilities of the computing system, the exploits associated with the vulnerabilities, and the risk level of the vulnerabilities. The report can also include links to information about the exploits.