Jose R Bernal

US Patent:

20200120128, Apr 16, 2020

Filed:

Oct 8, 2019

Appl. No.:

16/596478

Inventors:

- Santa Clara CA, US
Lisa Henderson - Temecula CA, US
Jose Bernal - San Diego CA, US
Bryan Boyle - San Diego CA, US

International Classification:

H04L 29/06
G06F 21/57

Abstract:

An apparatus and associated method are provided for reducing a security risk in a networked computer system architecture. The method comprises receiving at a security computer external vulnerability data from an external source regarding vulnerabilities associated with an attack vector for configuration item (CI) data related to a (CI) device, of the networked computer system. The security computer accesses a configuration management database (CMDB) and the CI data related to the physical device is read. Trust zone data associated with the CI device is determined utilizing the CMDB, and the security computer performs a vulnerability calculation for the CI device utilizing the external vulnerability data and associated trust zone data. This is also done for a second CI device. The vulnerability calculations for both are compared and this comparison serves as a basis for prioritizing an action to be taken on the CI device or associated other network components.

US Patent:

20180219908, Aug 2, 2018

Filed:

Mar 29, 2018

Appl. No.:

15/939645

Inventors:

- Santa Clara CA, US
Lisa Henderson - Temecula CA, US
Jose Bernal - San Diego CA, US
Bryan Boyle - San Diego CA, US

International Classification:

H04L 29/06

Abstract:

An apparatus and associated method are provided for reducing a security risk in a networked computer system architecture. The method comprises receiving at a security computer external vulnerability data from an external source regarding vulnerabilities associated with an attack vector for configuration item (CI) data related to a (CI) device, of the networked computer system. The security computer accesses a configuration management database (CMDB) and the CI data related to the physical device is read. Trust zone data associated with the CI device is determined utilizing the CMDB, and the security computer performs a vulnerability calculation for the CI device utilizing the external vulnerability data and associated trust zone data. This is also done for a second CI device. The vulnerability calculations for both are compared and this comparison serves as a basis for prioritizing an action to be taken on the CI device or associated other network components.