METHOD AND SYSTEM FOR AUTOMATED DOCUMENTATION OF SECURITY THREATS AND VULNERABILITIES RELATED TO AN INFORMATION RESOURCE Russian patent published in 2023 - IPC G06F21/55 

FIELD: information security.

SUBSTANCE: invention relates to the field of information security. A method for automated documentation of security threats and vulnerabilities related to an information resource includes: initializing an information resource profile; expanding the profile of an information resource by adding new vertices and edges to its knowledge graph in an automated and interactive mode; clarification of the profile of the information resource by classifying the components of the profile and/or enriching the profile; determination of security threats and vulnerabilities related to the information resource by establishing relationships between the vertices of the profile graph and the corresponding threats and vulnerabilities, moreover, information about the components of the information resource that are obtained during the initialization, expansion and refinement of the profile of the information resource, and certain security threats and vulnerabilities related to the information resource are recorded in the documenting file of security threats and vulnerabilities.

EFFECT: increasing the reliability of the information received about threats and vulnerabilities related to the information resource.

11 cl, 4 dwg