Kontextbewusstes Verletzlichkeitspriorisierungssystem unter Verwendung einer Software-Bliste von Materialien (sboms)

Details

Veröffentlichungs-Nr.

EP4807602

Anmeldetag

7. Januar 2026

Veröffentlichung

16. September 2026

Rechtsraum

EP

IPC

G06F21/57, H04L9/40

Abstract

Systems and methods described herein provide context-aware vulnerability prioritization using Software Bill of Materials (SBOM) data and real-time contextual information from IoT and OT devices. Upon validating SBOM data, the system gathers contextual data, including environmental and device-specific information, and verifies its integrity. The data is standardized and common vulnerability exposure data is used to match vulnerabilities in the SBOM. Severity metrics are applied and combined with contextual data to assess overall risk. Based on the risk, risk scores that indicate vulnerability severity are assigned and each risk is prioritized accordingly. The prioritized data is then categorized into levels, distinguishing between purely contextual, device-specific, or combined data. According to the level of prioritization, a real-time alert is provided for context-aware vulnerability management, enabling immediate threat response.

Anmelder

Firma

Hitachi, Ltd.

Land

🇯🇵 Japan

Fachgebiete