Method to prevent root level access attack and measurable SLA security and compliance platform
AssigneeCyemptive Technologies, Inc.
InventorsRobert Pike, Gary Zelanko, Bryan Greene
Life of this patent
Estimating the term…
Abstract
A compliance monitor measures metrics regarding one or more managed devices in a network. The compliance monitor generates a log based on the information detected by the measurement trackers and to transmit a report based on the generated log to a recipient. The compliance monitor also initiates one or more security actions based on the one or more measurement trackers indicating that a measured metric exceeds an associated threshold measurement value.
Claims20
A method comprising:
- receiving, from a plurality of devices in a managed network, first logged information describing activity of the plurality of devices in the managed network;
- computing a first value for a security compliance metric for the managed network based on the received first logged information;
- comparing, at a first time, the first value for the security compliance metric to a threshold value corresponding to the metric;
- identifying the security compliance metric as being out of compliance based on the comparing of the first value to the threshold value;
- receiving second logged information from the plurality of devices;
- computing, at a second time later than the first time, a second value for the security compliance metric based on the second logged information;
- comparing the second value for the security compliance metric to the threshold value corresponding to the security compliance metric;
- determining that the security compliance metric that is in compliance based on the comparing of the second value to the threshold value;
- computing a time to compliance for the managed network based on the first time, the second time, the first logged information, and the second logged information;
- comparing the time to compliance to a threshold value;
- and
- initiating, responsive to the time to compliance exceeding the threshold value, a security action.
A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:
- receiving, from a plurality of devices in a managed network, first logged information describing activity of the plurality of devices in the managed network;
- computing a first value for a security compliance metric for the managed network based on the received first logged information;
- comparing, at a first time, the first value for the security compliance metric to a threshold value corresponding to the metric;
- identifying the security compliance metric as being out of compliance based on the comparing of the first value to the threshold value;
- receiving second logged information from the plurality of devices;
- computing, at a second time later than the first time, a second value for the security compliance metric based on the second logged information;
- comparing the second value for the security compliance metric to the threshold value corresponding to the security compliance metric;
- determining that the security compliance metric that is in compliance based on the comparing of the second value to the threshold value;
- computing a time to compliance for the managed network based on the first time, the second time, the first logged information, and the second logged information;
- comparing the time to compliance to a threshold value;
- and
- initiating, responsive to the time to compliance exceeding the threshold value, a security action.
Dependencies are inferred from the claim text.