Method and apparatus for monitoring computer network security enforcement

A method of monitoring abidance of a network component by a security enforcement provision utilized in a computer network, the method comprising:

• detecting whether the network component has one of violated, modified or circumvented the security enforcement provision of the computer network;
• detecting whether an enforcement provision monitoring module has been one of violated, modified or circumvented;
• and
• if either detection is positive, acting on the network component in a manner in which the computer network operates at a level appropriate to the degree of the violation, modification, or circumvention of the security enforcement provision.

A method of monitoring abidance of a network component by a security enforcement provision utilized in a computer network, the method comprising:

• detecting whether the network component has one of violated, modified or circumvented the security enforcement provision of the computer network by comparing a profile record of the network component to a rule set defining a security policy;
• detecting whether an enforcement provision monitoring module on the network component has been one of violated, modified or circumvented;
• if either detection is positive, acting on the network component in a manner in which the network operates at a level appropriate to the degree of the violation, modification, or circumvention of the security enforcement provision;
• and
• notifying an operator of the computer network of the positive detection.

A method of monitoring abidance of a network component by a security enforcement provision utilized in a computer network, the method comprising:

• gathering network component data related to the network component and storing the data in a profile record;
• detecting whether the network component has one of violated, modified or circumvented the security enforcement provision of the network by comparing the profile record to a rule set defining a security policy;
• detecting whether an enforcement provision monitoring module has been one of violated, modified or circumvented;
• if either detection is positive, acting on the component in a manner in which the network operates at a level appropriate to the degree of the violation, modification, or circumvention of the security enforcement provision;
• and
• notifying an operator of the network of the positive detection.

A system for monitoring abidance by a network security provision present in a network, the system comprising:

• an agent module residing on an end user system;
• a security server containing a plurality of components for collecting and inspecting data;
• a security database containing end user system data and security rule data, wherein the security server and the security database are in communication;
• and
• a notification module on the security server capable of notifying a third party of a security violation.

A system for monitoring abidance by a network security provision present in a network, the system comprising:

• an agent module residing on an end user system;
• a security server containing a plurality of components for collecting and inspecting data;
• a security database containing end user system data and security rule data, wherein the security server and the security database are in communication;
• and
• a virtual private network through which data is transmitted between the end user system and the security server.

A system for monitoring security activity in a computer network comprising:

• an agent module having a data collection component and a server session control component;
• a collector module having a session control listener and a preprocessor;
• a policy inspector having a host information validation module and a new user set up module;
• a notifier module having an exception log processor;
• and
• an access control module for processing access control requests.