Systems and methods for determining malicious-attack exposure levels based on field-data analysis

摘要

A computer-implemented method for determining malicious-attack exposure levels based on field-data analysis may include (1) receiving a plurality of attack reports from a plurality of computing systems, wherein at least one attack report includes an identifier of a software component of a computing system within the plurality of computing systems from which the attack report was received and an indication that a malicious attack was detected at the computing system, (2) determining a number of attack reports within the plurality of attack reports that identify the software component, (3) analyzing the plurality of attack reports to determine, based at least in part on the number of attack reports, a level of exposure to malicious attacks of the software component, and (4) making, based at least in part on the level of exposure, a security determination related to the software component. Various other methods, systems, and computer-readable media are also disclosed.

主权项

1. A computer-implemented method for determining malicious-attack exposure levels based on field-data analysis, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
receiving a plurality of attack reports from a plurality of computing systems, wherein at least one attack report within the plurality of attack reports comprises:
an identifier of a software component of a computing system within the plurality of computing systems from which the attack report was received;an indication that a malicious attack was detected at the computing system from which the attack report was received; determining a number of attack reports within the plurality of attack reports that identify the software component; analyzing the plurality of attack reports to determine, based at least in part on the number of attack reports within the plurality of attack reports that identify the software component, a level of exposure to malicious attacks of the software component that reflects a portion of an attack surface of the software component that is actually attacked in the field; making, based at least in part on the level of exposure to malicious attacks of the software component, a security determination related to the software component.