Éanna Mulrooney.

Menu

Patents - SecOps

Our Approach to Smarter Software Vulnerability Triage - Patent no:11861013

Author image Éanna Mulrooney Sept 28, 2020.

List of Patents

Patent details



Systems and methods for triaging software vulnerabilities
Patent number:: 11861013
Abstract: Systems and methods are provided for the classification of identified security vulnerabilities in software applications, and their triage based on automated decision-tree triage and/or machine learning. The disclosed system may generate a report listing detected potential vulnerability issues, and automatically determine whether the potential vulnerability issues are exploitable using automated triage policies containing decision trees or by extracting vulnerability features from the report and processing the extracted vulnerability features using machine learning models.
Filed: September 28, 2020
Date of Patent: January 2, 2024
Assignee: Accenture Global Solutions Limited

How Our Cybersecurity Solution Works


Our patent introduces a system that enhances the process of identifying, classifying, and prioritizing software vulnerabilities. This method is crucial for maintaining robust software security during development phases and beyond.


Key Components of the Approach


  • Automated Triage with Decision Trees: — The system employs decision trees for an initial assessment, methodically categorizing potential threats based on predefined criteria. This step ensures a structured evaluation of each identified issue.
  • Enhancement through Machine Learning: — Supplementing the decision trees, machine learning models analyze historical vulnerability data to predict and assess future threats. This dynamic component enables the system to adapt and improve over time, offering refined vulnerability assessments.
  • Comprehensive Reporting: — An integral part of the system is its ability to generate detailed reports post-analysis. These reports list identified vulnerabilities, providing insights into their potential exploitability and severity. This feature aids in prioritizing fixes and streamlining the remediation process.

The development and filing of this patent took over two years while I was at Accenture, reflecting a significant period of research, collaboration, and innovation. I'm pleased with the outcome, recognizing its contribution to the field, and am looking forward to seeing it's impact in the industry.