Automated security manager
AssigneeOracle International Corporation
InventorNigel King
Life of this patent
Estimating the term…
Abstract
Systems, methods, media, and other embodiments associated with automated security management are described. One example system embodiment includes logic to collect, organize, and maintain data concerning electronic information resources, data concerning security criteria to which the electronic information resources may be subjected, and data concerning security risks to which the electronic information resources may be susceptible. The system may include logic to make an automated security management decision based on analyzing the data concerning the electronic information resources, the data concerning the security criteria, and the data concerning the security risks.
Claims25
A system, comprising:
- a first data store to store asset data that is related to an electronic information resource and that is related to a process that relies on the electronic information resource;
- a security risk analysis logic to identify a risk associated with an electronic information resource and to determine an impact associated with the risk occurring to the electronic information resource;
- a recovery logic to determine, upon the occurrence of a risk, a recovery attainable for an electronic information resource subjected to the risk;
- a score logic to determine one or more values that quantify security management performance with respect to a set of electronic information resources;
- a loss logic to determine a loss expectancy associated with an electronic information resource, the loss expectancy being determined from the one or more values;
- and
- a decision logic to provide a signal concerning an automated security action to be taken, where the action to be taken depends, at least in part, on the values, or the loss expectancy.
A machine-readable medium having stored thereon machine-executable instructions that if executed by a machine cause the machine to perform a method, the method comprising:
- accessing a first set of data concerning one or more computer-supported information resources and one or more processes that rely on the computer-supported information resources;
- accessing a second set of data concerning one or more security criteria related to the one or more computer-supported information resources;
- accessing a third set of data concerning one or more risks associated with the one or more computer-supported information resources;
- accessing a fourth set of data concerning one or more automated responses available to apply upon determining that a computer-supported information resource has been subjected to a risk;
- determining one or more security management scores based, at least in part, on analyzing the first set of data in light of the second, third, or fourth sets of data, or analyzing the third set of data in light of the fourth set of data;
- and
- controlling a security process based on the one or more security management scores.
A system, comprising:
- means for collecting, organizing, and maintaining data concerning electronic information resources;
- means for collecting, organizing, and maintaining data concerning security criteria to which the electronic information resources are to be subjected;
- means for collecting, organizing, and maintaining data concerning security risks to which the electronic information resources are susceptible;
- and
- means for making an automated security management decision based on analysis of the data concerning the electronic information resources, the data concerning the security criteria, and the data concerning the security risks.
Dependencies are inferred from the claim text.