Predicting vulnerabilities affecting assets of an enterprise system

摘要

A method includes obtaining vulnerability scan results for a first subset of assets of an enterprise system and populating an observation data structure, based on the obtained vulnerability scan results, indicating which vulnerabilities are observed on respective ones of the assets. The method also includes determining a set of recommendations for missing entries of the observation data structure for a second subset of the assets of the enterprise system utilizing at least one recommender system that comprises at least one similarity function for determining similarity between a first and second sets of vulnerabilities observed on ones of the first and second subsets of the assets. The method further includes predicting vulnerabilities affecting the second subset of assets utilizing a machine learning model and the determined set of recommendations, and applying remediation actions for remediating the predicted vulnerabilities affecting the second subset of the assets.