Security capability determination
AssigneeInternational Business Machines Corporation
InventorsChristopher J Colonna, Stephen Robert Guendert, Pasquale A. Catalano, Michael James Becht
Life of this patent
Estimating the term…
Abstract
An approach for improving endpoint security. The approach requests security capabilities from endpoints of communications. The approach can analyze the differences between the security capabilities of the endpoints. The approach can negotiate a security capability supported by the endpoints of the communication. The approach can determine if the negotiation succeeded. If the negotiation failed, then the approach can create a report describing capabilities of the endpoints and suggesting changes to improve the endpoint security. The approach can send the report to the appropriate interested personnel.
Claims20
A computer-implemented method for improving endpoint security, the computer-implemented method comprising:
- requesting security capabilities from one or more endpoints;
- analyzing a difference between the security capabilities;
- negotiating a security capability supported by the one or more endpoints;
- determining if the negotiating succeeded;
- responsive to the negotiating succeeding, dynamically changing a security level between the one or more endpoints to a higher security level based on at least one of endpoint hardware or endpoint firmware capabilities;
- responsive to the negotiating not succeeding, creating a report describing capabilities associated with the one or more endpoints and suggesting changes for at least one of the one or more endpoints and sending the report to predetermined interested personnel.
A computer program product for improving endpoint security, the computer program product comprising:
- one or more non-transitory computer readable storage media and program instructions stored on the one or more non-transitory computer readable storage media, the program instructions comprising:
- program instructions to request security capabilities from one or more endpoints;
- program instructions to analyze differences between the security capabilities;
- program instructions to negotiate a security capability supported by the one or more endpoints;
- program instructions to determine if the negotiation succeeded;
- responsive to the negotiating succeeding, program instructions to dynamically change a security level between the one or more endpoints to a higher security level based on at least one of endpoint hardware or endpoint firmware capabilities;
- and
- responsive to the negotiation failing, program instructions to create a report describing capabilities associated with the one or more endpoints and suggesting changes for at least one of the one or more endpoints and to send the report to predetermined interested personnel.
A computer system for improving endpoint security, the computer system comprising:
- one or more computer processors;
- one or more non-transitory computer readable storage media;
- and
- program instructions stored on the one or more non-transitory computer readable storage media, the program instructions comprising:
- program instructions to request security capabilities from one or more endpoints;
- program instructions to analyze a difference between the security capabilities;
- program instructions to negotiate a security capability supported by the one or more endpoints;
- program instructions to determine if the negotiation succeeded;
- responsive to the negotiating succeeding, program instructions to dynamically change a security level between the one or more endpoints to a higher security level based on at least one of endpoint hardware or endpoint firmware capabilities;
- and
- responsive to the negotiation failing, program instructions to create a report describing capabilities associated with the one or more endpoints and suggesting changes for at least one of the one or more endpoints and to send the report to predetermined interested personnel.
Dependencies are inferred from the claim text.