Back to results
US 10,476,912 B2Granted
Creating, visualizing, and simulating a threat based whitelisting security policy and security zones for networks
AssigneeVeracity Security Intelligence, Inc.
InventorRoger Hill
Life of this patent
Estimating the term…
Abstract
Techniques described herein are directed toward creating, visualizing, and simulating a threat based whitelisting security policy and security zones for networks. The disclosed technology may be implemented by providing a graphical user interface (GUI) on a network orchestration and security platform that facilitates creation and visualization of security zones and security policies for networks.
Claims18
A method comprising:
- generating a plurality of security zones in a network comprising a plurality of assets, wherein each of the plurality of security zones comprises a respective set of assets of the plurality of assets, wherein the plurality of security zones are generated based at least in part on a regularity of communications between assets of the plurality of assets and a type of protocol communication between assets of the plurality of assets;
- initializing an application comprising a graphical user interface for editing and visually representing the plurality of security zones of the network;
- displaying, on the graphical user interface, a visual representation of a first security zone of the plurality of security zones of the network, wherein the first security zone comprises a first set of assets of the plurality of assets;
- receiving data corresponding to user input at the graphical user interface editing the first security zone;
- and
- in response to receiving the data, editing the first security zone.
3 more elements
A non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor, causes a system to:
- generate a plurality of security zones in a network comprising a plurality of assets, wherein each of the plurality of security zones comprises a respective set of assets of the plurality of assets, wherein the plurality of security zones are generated based at least in part on a regularity of communications between assets of the plurality of assets and a type of protocol communication between assets of the plurality of assets;
- initialize an application comprising a graphical user interface for editing and visually representing the plurality of security zones of the network;
- display, on the graphical user interface, a visual representation of a first security zone of the plurality of security zones of the network, wherein the first security zone comprises a first set of assets of the plurality of assets;
- receive data corresponding to user input at the graphical user interface editing the first security zone;
- and
- in response to receiving the data, editing the first security zone.
3 more elements
An industrial network system, comprising:
- a controller;
- a plurality of forwarding devices communicatively coupled to the controller over an industrial network;
- a plurality of assets, wherein each of the plurality of assets is communicatively coupled to a port of one of the plurality of forwarding devices;
- and
- a non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor, causes the system to:
- generate a plurality of security zones in the industrial network, wherein each of the plurality of security zones comprises a respective set of assets of the plurality of assets, wherein the plurality of security zones are generated based at least in part on a regularity of communications between assets of the plurality of assets and a type of protocol communication between assets of the plurality of assets;
- initialize an application comprising a graphical user interface for editing and visually representing the plurality of the security zones of the industrial network;
- display, on the graphical user interface, a visual representation of a first security zone of the plurality of security zones of the network, wherein the first security zone comprises a first set of assets of the plurality of assets;
- receive data corresponding to user input at the graphical user interface editing the first security zone;
- and
- in response to receiving the data, editing the first security zone.
8 more elements
Dependencies are inferred from the claim text.