Anordnung und Verfahren zur Bedrohungserkennung und -Verhinderung in einem Computer oder Computernetzwerk

Details

Veröffentlichungs-Nr.

EP4811195

Anmeldetag

21. März 2025

Veröffentlichung

23. September 2026

Rechtsraum

EP

Abstract

An arrangement (410) and a method, e.g. a computer implemented method, of threat detection and/or prevention in a computer (101) or computer network (201), wherein the method comprises collecting vulnerability information from a computer (101) or computer network (201) for detecting vulnerable components, such as a vulnerable library, a vulnerable feature, a vulnerable package, a vulnerable container, vulnerable plugin and/or a vulnerable extension, at the computer (101), collecting information relating to executables, processes and/or applications which are running on the computer (101), and checking if the process, application or executable which have been identified running in the computer (101) are using any of the detected vulnerable components, and monitoring the running executables, processes and/or applications for a predefined period of time, and determining the risk level of an executable, process, application and/or the computer (101) based on the information collected during monitoring, wherein the risk of level of the executable, process, application and/or the computer (101) is elevated if the vulnerable component is used, e.g. systematically used, during monitoring.

Anmelder

Firma

WithSecure Corporation

Land

🇫🇮 Finnland