AUTOMATED SECURITY ASSESSMENT OF INFORMATION SYSTEMS

摘要

Disclosed is a system and method for managing security vulnerabilities and threats in at least one monitored system using a system manager such as SAP Solution Manager. The proposed method includes storage of security-related data associated with monitored systems, reading and loading of threat and vulnerability data to custom data tables for storage, continuously monitoring of security events, threats and vulnerabilities in monitored systems, extracting security related data from the monitored systems, customizing settings for security relevant configuration stores, performing security checks for monitored systems, monitoring and visualizing security related alerts, security related patch, vulnerability data, and threat data for monitored systems, and investigating and managing security-related alerts in the system manager.