Network security and management system

A computer-implemented method for performing network security management for a plurality of networks, each comprising one or more networked devices, wherein each of the networks includes one or more security devices configured to monitor data traffic into and out of the plurality of networks, said method comprising the steps of:

• (a) importing device configuration data into a management system from the plurality of security devices, wherein the device configuration data comprises network topologies for the plurality of networks, wherein the network topologies include object definitions for the networked devices included in the plurality of networks;
• (b) creating an abstracted asset definition for the networked devices of the plurality of networks, with each asset definition comprising an alphanumeric identifier corresponding with an object definition of the respective networked device;
• (c) creating one or more abstracted access rules, wherein the access rules implement access requirements that define intentions for communication between the networked devices included in the plurality of networks, and wherein the access rules incorporate the asset definitions within the access rules such that the access rules define access between the abstracted asset definitions of the networked devices included in the plurality of networks,
• wherein the access requirements are provided by a user of the management system to define the intentions for communication between the networked devices included in the plurality of networks;
• (d) compiling each of the access rules into one or more security rules, wherein the security rules use the object definitions to define access between the networked devices included in the plurality of networks;
• (e) identifying for each security rule, which security device from the plurality of security devices is responsible for monitoring data traffic between the networked devices defined in the security rule;
• and
• (f) transmitting the one or more security rules to the security devices identified in step (e).

A non-transitory computer-readable storage medium with an executable program stored thereon for performing network security management for a plurality of networks, each comprising one or more networked devices, wherein each of the networks includes one or more security devices configured to monitor data traffic into and out of the plurality of networks, wherein when the program is executed by a processor, the processor is configured to:

• (a) import device configuration data into a management system from the plurality of security devices, wherein the device configuration data comprises network topologies for the plurality of networks, wherein the network topologies include object definitions for the networked devices included in the plurality of networks;
• (b) create an abstracted asset definition for the networked devices of the plurality of networks, with each asset definition comprising an alphanumeric identifier corresponding with an object definition of the respective networked device;
• (c) create one or more abstracted access rules, wherein the access rules implement access requirements that define intentions for communication between the networked devices included in the plurality of networks, and wherein the access rules incorporate the asset definitions within the access rules such that the access rules define access between the abstracted asset definitions of the networked devices included in the plurality of networks,
• wherein the access requirements are provided by a user of the management system to define the intentions for communication between the networked devices included in the plurality of networks;
• (d) compile each of the access rules into one or more security rules, wherein the security rules use the object definitions to define access between the networked devices included in the plurality of networks;
• (e) identify for each security rule, which security device from the plurality of security devices is responsible for monitoring data traffic between the networked devices defined in the security rule;
• and
• (f) transmit the one or more security rules to the security devices identified in step (e).