An Enterprise Architecture for Integrated Asset Discovery and Vulnerability Analytics

This paper presents an enterprise vulnerability data architecture that integrates asset discovery systems, configuration management databases (CMDB), vulnerability scanning platforms, and enterprise service management tools into a unified security analytics pipeline.

Modern enterprises operate hybrid infrastructures spanning cloud platforms and on-premises data centers, making vulnerability management increasingly complex. The proposed architecture demonstrates how automated discovery mechanisms populate CMDB inventories, vulnerability scanners identify security weaknesses across enterprise assets, and centralized security platforms aggregate vulnerability findings. These findings are subsequently integrated with enterprise service management systems to enable remediation workflows and security analytics.

A case study illustrates how vulnerability data can be correlated with asset inventory to analyze vulnerability severity distributions, asset exposure levels, and remediation timelines. The architecture improves enterprise visibility into security risks and supports more effective vulnerability management processes.

Keywords: vulnerability management, asset discovery, CMDB, security analytics, enterprise cybersecurity, vulnerability scanning.

Note: This manuscript is a preprint version of a research paper intended for journal submission.