SYSTEMS FOR DIAGNOSING AND TRACKING PRODUCT VULNERABILITIES

摘要

Systems and methods for tracking telecom computing device vulnerabilities. The system includes a database storing a plurality of entries that describe security vulnerabilities, and a controller that receives input from a user selecting a class of telecommunication devices, e.g. a product line, and searches the database to identify pertinent entries describing a relevant security vulnerability for the class. The controller also identifies an authoritative entry that describes the relevant security vulnerability, validates pertinent entries within the database that conform with the authoritative entry, generates a report indicating a severity of the security vulnerability within the class based on valid entries within the database, and assesses a severity of the relevant security vulnerability for the class based on the conforming entries.

主权项

1. A system comprising:
a database configured to store a plurality of entries, each entry describing at least one security vulnerability, wherein each security vulnerability enables exploitation of a defect on a telecommunication device; and a controller configured to receive input describing a class of telecommunication devices, and to electronically search the database to identify pertinent entries describing a relevant security vulnerability pertaining to the class, the controller being further configured to:
identify an authoritative entry in the database that describes the relevant security vulnerability; andfor each entry in the database that is pertinent to the relevant security vulnerability, add a tag to that entry if the entry stores information that conflicts with the authoritative entry, wherein the tag indicates the conflict.