System and method for providing an enterprise-based computer security policy
OwnerDaniel G. Farmerinventor
Life of this patent
Estimating the term…
Abstract
A system and method for providing an enterprise-based security policy are described. In one embodiment, the system includes a central agent that is configured to retrieve a policy skin from a database and to transmit the policy skin to a host. The system further includes a data gathering engine that is configured to collect host data related to the host. In addition, the system includes a policy engine that is configured to execute the policy skin against the host data to determine security policy compliance.
Claims31
A system for providing an enterprise-based security policy, the system comprising:
- a central agent configured to retrieve a policy skin from a database and to transmit the policy skin to a host;
- a data gathering engine configured to collect host data related to the host;
- and
- a policy engine configured to execute the policy skin against the host data to determine security policy compliance.
A language stack for providing an enterprise-based security policy, the language stack comprising:
- a policy strings layer configured to include policy strings;
- a policy definition language layer configured to include a policy definition language;
- a first translator configured to parse policy strings into the policy definition language;
- a general purpose language layer configured to include a general purpose language;
- and
- a second translator configured to parse the policy definition language into the general purpose language.
A method for providing an enterprise-based security policy, the method comprising:
- receiving a policy skin from a central server;
- collecting host data related to a host;
- executing the policy skin against the host data to determine security policy compliance;
- and
- transmitting the host data and policy compliance information to the central server.
A system for providing an enterprise-based security policy, the system comprising:
- means for receiving a policy skin from a central server;
- means for collecting host data related to a host;
- means for executing the policy skin against the host data to determine security policy compliance;
- and
- means for transmitting the host data and policy compliance information to the central server.
Dependencies are inferred from the claim text.