Back to results
US 10,567,417 B1Granted
Systems and methods for adaptive security protocols in a managed system
AssigneeUnited Services Automobile Association (USAA)
InventorsChad Dinning, Steven Thoede
Life of this patent
Estimating the term…
Abstract
Embodiments disclosed herein describe one or more servers of an enterprise system that may be configured to receive security and vulnerability information from a plurality of data sources and then rate them based upon their respective variance from an enterprise policy or status quo configuration in a related process area. The servers may execute scoring modules to normalize the data received from the data sources to tailor the system response to a given vulnerability. As such, identified vulnerabilities may be rated according to the needs of the enterprise, rather than being rated according to the factory or default configurations of a particular data source.
Claims18
A computer-implemented method comprising:
- receiving, by a computer, a set of data records, each data record comprising a variance value and a priority value for an electronic device, where the variance value is determined in accordance with a pre-determined enterprise software standard and the priority value is indicative of a security risk to the electronic device based on configured logic of the electronic device;
- generating, by the computer in an issue database, a set of issue data records by applying a normalization protocol to each data record, each issue data record comprising an updated priority value and an updated variance value for each data record, wherein the updated priority value is indicative of a security risk to the computer determined based on policies of the computer;
- transmitting, by the computer, at least a subset of the set of issue data records in accordance with at least one of the updated priority value and the updated variance value to one or more mitigation servers;
- monitoring, by the computer, the one or more mitigation servers where the computer determines whether the one or more mitigation servers mitigate the security risk to the computer by updating a software configuration on the electronic device;
- and
- when at least one mitigation server updates the software configuration on the electronic device in accordance with the updated priority value or updated variance value of at least one issue data record within the subset of the set of issue data records:
- updating a status field of that issue data record to a status indicating a satisfied issue data record, whereby that issue data record is no longer within the subset of the set of issue data records.
4 more elements
A computer server comprising:
- an issue database hosted on one or more servers comprising non-transitory machine-readable storage medium, the issue database configured to store set of issue data records where each data record comprises a variance value and a priority value for an electronic device, where the variance value is determined in accordance with a pre-determined enterprise software standard and the priority value is indicative of a security risk to the electronic device based on configured logic of the electronic device;
- and
- a hub server comprising a processor configured to:
- retrieve the set of issue data record from the issue database;
- generate a set of issue data records by applying a normalization protocol to each data record, each issue data record comprising an updated priority value and an updated variance value for each data record, wherein the updated priority value is indicative of a security risk to the computer determined based on policies of the computer;
- transmit at least a subset of the set of issue data records in accordance with at least one of the updated priority value and the updated variance value to one or more mitigation servers;
- monitor the one or more mitigation servers where the computer determines whether the one or more mitigation servers mitigate the security risk to the computer by updating a software configuration on the electronic device;
- and
- when at least one mitigation server updates the software configuration on the electronic device in accordance with the updated priority value or updated variance value of at least one issue data record within the subset of the set of issue data records update a status field of that issue data record to a status indicating a satisfied issue data record, whereby that issue data record is no longer within the subset of the set of issue data records.
6 more elements
Dependencies are inferred from the claim text.