Patents by Inventor Danny Su

Danny Su has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Vulnerability scoring based on organization-specific metrics
    Patent number: 12647443
    Abstract: In one example, a non-transitory computer-readable storage medium stores executable program instructions that detect, at a remote device node, vulnerability data associated with an exploitable vulnerability of a target enterprise network; retrieve, by a first local device node, the vulnerability data, which may include a CVSS score, determine, by a second local device node, a vulnerability score VT by determining a first subscore VT1, where the first subscore VT1 is based on a Maximized Confidentiality Impact (MCI) metric that is a modified privacy metric to capture the privacy impact of the exploitable vulnerability, where the first subscore VT1 is also based on a Maximized Highest Impact (MHI) metric to capture reputation damage based on an outsized single impact attribute, and on a Modified Confidentiality (MC) metric, Modified Integrity (MI) metric and Modified Availability (MA) as provided by CVSS; and remediate the exploitable vulnerability based on the vulnerability score VT.
    Type: Grant
    Filed: December 21, 2023
    Date of Patent: June 2, 2026
    Assignee: JPMORGAN CHASE BANK, N.A.
    Inventors: Ankur Sand, Martin J Grant, Luca Baggio, Danny Su, Danica Dometita, Nicholas Campbell, Ken K. Wilson, Dawn David-Swan, David R. Edwards, Syed Islam
  • VULNERABILITY SCORING BASED ON ORGANIZATION-SPECIFIC METRICS
    Publication number: 20240236137
    Abstract: In one example, a non-transitory computer-readable storage medium stores executable program instructions that detect, at a remote device node, vulnerability data associated with an exploitable vulnerability of a target enterprise network; retrieve, by a first local device node, the vulnerability data, which may include a CVSS score, determine, by a second local device node, a vulnerability score VT by determining a first subscore VT1, where the first subscore VT1 is based on a Maximized Confidentiality Impact (MCI) metric that is a modified privacy metric to capture the privacy impact of the exploitable vulnerability, where the first subscore VT1 is also based on a Maximized Highest Impact (MHI) metric to capture reputation damage based on an outsized single impact attribute, and on a Modified Confidentiality (MC) metric, Modified Integrity (MI) metric and Modified Availability (MA) as provided by CVSS; and remediate the exploitable vulnerability based on the vulnerability score VT.
    Type: Application
    Filed: December 21, 2023
    Publication date: July 11, 2024
    Inventors: Ankur Sand, Martin J. Grant, Luca Baggio, Danny Su, Danica Dometita, Nicholas Campbell, Ken K. Wilson, Dawn David-Swan, David R. Edwards, Syed ISLAM