PDstudio design system and method
AssigneeSecurity, Inc.
InventorsLuis Valente, John R. Guzik, Derek P. Pearcy
Life of this patent
Estimating the term…
Abstract
A policy developer studio comprising: a meta-policy core of network objects, a policy developer graphical user interface (GUI) tool for providing a front end to a policy language, an output in XML, a compiled output for a policy engine, and an output in human readable form is provided.
Claims71
A policy developer system for development of an implementable network security policy, said system comprising:
- a meta-policy for representing said network security policy;
- at least one translation of said meta-policy, said at least one translation used for said development of or implementation of said network security policy.
A policy developer method for development of an implementable network security policy, said method comprising:
- providing a meta-policy for representing said network security policy;
- providing at least one translation of said meta-policy, said at least one translation used for said development of or implementation of said network security policy.
A method for generating a network security policy in a policy language from a meta-policy, said method comprising:
- generating route information;
- generating host information;
- generating subnet credentials;
- generating host group credentials;
- generating network interface credentials;
- generating perimeter element credentials;
- generating NAT credentials;
- generating rules from relationships;
- generating rules per outcome component;
- and
- reporting of services by reporting elements.
An apparatus for generating a network security policy in a policy language from a meta-policy, said apparatus comprising:
- means for generating route information;
- means for generating host information;
- means for generating subnet credentials;
- means for generating host group credentials;
- means for generating network interface credentials;
- means for generating perimeter element credentials;
- means for generating NAT credentials;
- means for generating rules from relationships;
- means for generating rules per outcome component;
- and
- means for reporting of services by reporting elements.
A user interface to a meta-policy for allowing direct or indirect manipulation of actionable information of a network for developing and maintaining a network security policy, said user interface comprising:
- an application menu bar;
- toolbars;
- a subnet pane;
- a tabbed content pane;
- a tabbed messages pane;
- and
- various property windows used for defining objects of said meta-policy.
An apparatus for providing policy description of a current policy domain, said apparatus comprising:
- means for indexing an overview of network objects of said policy domain, said indexing by name and by network;
- for each of said network objects, means for providing detailed information about associated services and relationships between other network objects;
- and
- means for providing outcomes information, comprising showing criticality information assigned to associated relationship outcomes.
A method for providing policy description of a current network security policy, said method comprising:
- indexing an overview of network objects of said current policy, said indexing by name and by network;
- for each of said network objects, providing detailed information about associated services and relationships between other network objects;
- and
- providing outcomes information, comprising showing criticality information assigned to associated relationship outcomes.
A method for generating a policy description output from meta-policy objects, said meta-policy objects comprising a plurality of network objects and outcomes, said meta-policy objects representing a network security policy, said method comprising:
- generating a name index view and a network index view of said plurality of network objects;
- generating a view on specific network object information for each network object of said plurality of network objects;
- and
- generating a view on information of said outcomes.
An apparatus for generating a policy description output from meta-policy objects, said meta-policy objects comprising a plurality of network objects and outcomes, said meta-policy objects representing a network security policy, said apparatus comprising:
- means for generating a name index view and a network index view of said plurality of network objects;
- means for generating a view on specific network object information for each network object of said plurality of network objects;
- and
- means for generating a view on information of said outcomes.
Dependencies are inferred from the claim text.