Integrated security administrator
OwnerTimothy Thien-Kiem Nguyen, Martha Fischer Evert +1inventors
InventorsTimothy Thien-Kiem Nguyen, Martha Fischer Evert, Francois Thierry Barret
Life of this patent
Estimating the term…
Abstract
An Integrated Security Administrator (ISA) for managing an Informational Network (IN) includes a plurality of monitoring agents, wherein at least one of the plurality of monitoring agents is configured to obtain a plurality of events from a plurality of monitored elements, reduce the plurality of events to obtain a reduced plurality of events, select an event from the reduced plurality of events, characterize the event using stored knowledge, and respond to the event at a response level, and a core system configured to update data and instructions stored on the at least one of the plurality of monitoring agents.
Claims23
An Integrated Security Administrator (ISA) for managing an Informational Network (IN), comprising:
- a plurality of monitoring agents, wherein at least one of the plurality of monitoring agents is configured to obtain a plurality of events from a plurality of monitored elements, reduce the plurality of events to obtain a reduced plurality of events, select an event from the reduced plurality of events, characterize the event using stored knowledge, and respond to the event at a response level;
- and
- a core system configured to update data and instructions stored on the at least one of the plurality of monitoring agents.
A method of protecting an Informational Network (IN) using a Integrated Security Administrator (ISA), comprising:
- obtaining a plurality of events on the IN;
- reducing the plurality of events to obtain a reduced plurality of events;
- selecting an event from the reduced plurality of events;
- characterizing the event using stored knowledge;
- and
- responding to the event at a response level using a result of characterizing the event.
An apparatus for protecting an Informational Network (IN) using a Integrated Security Administrator (ISA), comprising:
- means for obtaining a plurality of events on the IN;
- means for reducing the plurality of events to obtain a reduced plurality of events;
- means for selecting an event from the reduced plurality of events;
- means for characterizing the event using stored knowledge;
- and
- means for responding to the event at a response level using a result of characterizing the event.
Dependencies are inferred from the claim text.