Vulnerability assessment based on machine inference

Abstract

Techniques related to vulnerability assessment based on machine inference are disclosed. A vulnerability assessment server may receive, from a client device, a set of metadata corresponding to a program stored on the client device. Further, the vulnerability assessment server may extract a program name from the set of metadata. Still further, the vulnerability assessment server may determine one or more vulnerabilities of the program based on searching for the program name in one or more storage systems that maintain sets of vulnerability data.

1 .- 20 . (canceled) 
     
     
         21 . A vulnerability assessment method comprising:
 receiving, from a client device, at a vulnerability assessment server, a set of metadata corresponding to a program stored on the client device;   generating, at the vulnerability assessment server, a set of query tokens based on the set of metadata;   generating, at the vulnerability assessment server, a query based on the set of query tokens;   modifying, at the vulnerability assessment server, the query based on machine learning;   performing a search based on the modified query, in one or more storage systems that maintain sets of unstructured vulnerability data, for a set of unstructured vulnerability data corresponding to the program;   identifying, at the vulnerability assessment server, one or more vulnerabilities of the program based on the set of unstructured vulnerability data corresponding to the program;   wherein the method is performed by one or more computing devices.