Erzeugung und Verwendung von Integrierten Schwachstellenintelligenzdaten unter Berücksichtigung Produktspezifischer Backport-Anfälligkeitsfixe

Details

Veröffentlichungs-Nr.

EP4793762

Anmeldetag

12. Februar 2026

Veröffentlichung

19. August 2026

Rechtsraum

EP

IPC

G06F8/65, G06F21/57, H04L9/40

Abstract

Technologies are disclosed herein that are directed to the improvement of vulnerability assessment process by avoiding false positive vulnerabilities caused by vendor specific backports of vulnerability fixes that are not considered by conventional vulnerability assessment systems. To secure their software products, vendors identify components that are affected by vulnerabilities used by their products and apply vulnerability fixes introduced by later component versions to those component versions used in their products. This created "gaps" in vulnerable component version ranges provided by public vulnerability intelligence data streams. Vulnerability assessment processes that solely rely on public vulnerability intelligence data incorrectly report vulnerabilities for component versions containing such backported vulnerability fixes. An integrated vulnerability intelligence database that combines public vulnerability intelligence data with vendor specific vulnerability backport data provides a more complete basis for vulnerability assessments that are not prone to fix backport caused false positives.

Anmelder

Firma

Dynatrace LLC

Land

🇺🇸 USA

Fachgebiete