Abstract: A method of product update analysis and management includes receiving metadata of a product update related to a code change of an application on an endpoint of a managed network. The method includes scraping posts related to the product update from two different internet websites. The method includes aggregating the posts from the internet websites. The method includes quantifying a social volume from the aggregated posts. The social volume being a measure of discussion related to the product update. The method includes extracting content from the aggregated posts. Based on the extracted content, the method includes summarizing the posts into a collection of terms or phrases representative of a topic of the posts. The method includes causing display of an indication of the social volume and the collection of terms or phrases. The method includes implementing the product update to affect a change in program code at the application.

Abstract: A method of product update analysis and management includes receiving metadata of a product update related to a code change of an application on an endpoint of a managed network. The method includes scraping posts related to the product update from two different internet websites. The method includes aggregating the posts from the internet websites. The method includes quantifying a social volume from the aggregated posts. The social volume being a measure of discussion related to the product update. The method includes extracting content from the aggregated posts. Based on the extracted content, the method includes summarizing the posts into a collection of terms or phrases representative of a topic of the posts. The method includes causing display of an indication of the social volume and the collection of terms or phrases. The method includes implementing the product update to affect a change in program code at the application.

Abstract: An apparatus includes a processor operatively coupled to a memory. The processor receives a first set of risk assessment rules including first user privilege criteria and first device criteria. The first device criteria include a computing device patch level, a network type, and/or a password policy. The processor identifies a user-specific security risk based on the first set of risk assessment rules and applies a privilege mitigation measure based on the user-specific security risk without being in communication with a management server. The processor later receives a second, updated set of risk assessment rules at the computing device. Upon detecting another login of the user, the processor identifies an updated user-specific security risk based on the updated set of risk assessment rules, and applies a modified privilege mitigation measure based on the updated user-specific security risk, again without being in communication with the management server.

Abstract: An apparatus includes a processor operatively coupled to a memory. The processor receives a first set of risk assessment rules including first user privilege criteria and first device criteria. The first device criteria includes a computing device patch level, a network type, and/or a password policy. The processor identifies a user-specific security risk based on the first set of risk assessment rules and applies a privilege mitigation measure based on the user-specific security risk without being in communication with a management server. The processor later receives a second, updated set of risk assessment rules at the computing device. Upon detecting another login of the user, the processor identifies an updated user-specific security risk based on the updated set of risk assessment rules, and applies a modified privilege mitigation measure based on the updated user-specific security risk, again without being in communication with the management server.

Abstract: An apparatus includes a processor operatively coupled to a memory. The processor receives a first set of risk assessment rules including first user privilege criteria and first device criteria. The first device criteria includes a computing device patch level, a network type, and/or a password policy. The processor identifies a user-specific security risk based on the first set of risk assessment rules and applies a privilege mitigation measure based on the user-specific security risk without being in communication with a management server. The processor later receives a second, updated set of risk assessment rules at the computing device. Upon detecting another login of the user, the processor identifies an updated user-specific security risk based on the updated set of risk assessment rules, and applies a modified privilege mitigation measure based on the updated user-specific security risk, again without being in communication with the management server.