Tool, method and apparatus for assessing network security
AssigneeLucent Technologies Inc.
InventorsUma Chandrashekhar, Eunyoung Kim, Daniel P. Koller, Andrew Roy McGee, David D. Picklesimer, Timothy J. Politowicz, Steven H. Richman, James S. Tiller, Chen Xie
Life of this patent
Estimating the term…
Abstract
Tools and methods in which user interaction via a common user interface enables the assessing of network security prior to implementation of the network, as well as assessing the security of existing networks, portions of existing networks, or modifications to existing networks. A network security model useful in realizing the tools and methods is also disclosed
Claims26
A software tool for assessing network security, comprising:
- a first module, for receiving network characterization information from a customer;
- a second module, for determining if said network characterization information has associated with it a network security vulnerability;
- and
- a third module, for generating security recommendations based upon any determined network security vulnerabilities.
A method, comprising:
- classifying the functions of each of a plurality of network elements, protocols and services according to respective ones of a plurality of security layers;
- associating each classified function with at least one of a plurality of security planes, each of said plurality of security planes included within each of said plurality of security layers;
- identifying the vulnerability of each function for each security layer and security plane associated with said function;
- and
- providing a recommendation adapted to mitigate any identified vulnerabilities.
A computer readable medium containing instructions which, when executed by a processor, perform a process for assessing network security, comprising:
- means for receiving network characterization information from a customer;
- means determining if said network characterization information has associated with it a network security vulnerability;
- and
- means for generating security recommendations based upon any determined network security vulnerabilities.
Dependencies are inferred from the claim text.