ANALYZING RISK FOR DEVICES WITHIN A MANAGED ENVIRONMENT

Abstract: techniques for analyzing risk for devices within a managed environment are described. one example method includes receiving a provisioning request from a device including a device identifier, device credentials, and a current firmware revision, wherein the provisioning request indicates that the device is newly connected to the managed environment; verifying the authenticity of the device based at least in part on the device identifier and the device credentials; verifying that the current firmware revision of the device matches a master firmware revision associated with a type of the device; and determining a risk score associated with the device based at least in part on the device identifier, the device credentials, the current firmware revision of the device, and on whether any known vulnerabilities are associated with the type of the device.

Inventor(s): Karunakar Palicherla Reddy, Charles D. Robison, Michael S. Gatson

CPC Classification: G06F21/577 ({Assessing vulnerabilities and evaluating computer system security})

Search for rejections for patent application number 20250190578