US 2014/0006796 A1 · SYSTEM AND METHOD FOR IDENTIFYING SOFTWARE CHANGES

Abstract

An enterprise trust server (ETS) can include a user interface configured to initiate generation of a first file signature associated with a first file accessed from a file system associated with a computer system at a first time and generation of a second file signature associated with a second file accessed from the file system at a second time subsequent to the first time. The ETS also includes a file signature comparator configured to compare the first and second file signatures to determine a difference set of file signatures. The ETS can be configured to send a request comprising the difference set of file signatures to a trust repository and to receive a response that identifies a software product associated with the first and second files that changed between the first and second times based on the difference set of file signatures.

Claims21

Dependent claims

An enterprise trust server programmed to execute machine readable instructions, the enterprise trust server comprising:

a user interface configured to initiate generation of a first at least one file signature associated with a first at least one file accessed from at least one file system associated with a computer system at a first time, and generation of a second at least one file signature associated with a second at least one file accessed from the at least one file system at a second time subsequent to the first time;
and
a file signature comparator configured to compare the first and second at least one file signature to determine a difference set of file signatures, the enterprise trust server being configured to send a request comprising the difference set of file signatures to a trust repository and to receive a response that identifies at least one software product associated with the first and second at least one file that changed between the first and second times based on the difference set of file signatures.

A non-transitory computer-readable medium programmed for performing a method for identifying a change in software on a computer system, the method comprising:

scanning at least one file system associated with the computer system to access at least one file in response to a software change identification request;
generating at least one file signature corresponding to the respective at least one file;
comparing the at least one file signature to at least one baseline file signature to provide a difference set of file signatures, the at least one baseline file signature corresponding to a state of the at least one file at a previous time;
requesting identification of at least one software product associated with the at least one file that changed since the previous time based on the difference set of file signatures;
receiving results corresponding to a comparison of the difference set of file signatures with predetermined file signature data associated with a plurality of software products to identify the at least one software product;
and
providing a software change report associated with the determination of the at least one software product that changed based on the results corresponding to the comparison of the difference set of file signatures with the predetermined file signature data.

4 more elements

A network system comprising:

a plurality of enterprise trust servers that are each configured to initiate generation of a first plurality of file signatures associated with a first plurality of files accessed from at least one file system associated with at least one computer system at a first time, and generation of a second plurality of file signatures associated with a second plurality of files accessed from the at least one file system at a second time subsequent to the first time, the plurality of enterprise trust servers each being further configured to compare the respective first and second pluralities of file signatures to determine a difference set of file signatures;
and
a trust repository communicatively coupled to the plurality of enterprise trust servers via a network and configured to receive the difference set of file signatures in a respective request from each of the plurality of enterprise trust servers, the trust repository being configured to compare the difference set of file signatures with predetermined file signature data associated with a plurality of software products to determine at least one software product associated with the first and second pluralities of files that changed between the first and second times, and to provide results associated with the comparison back to the respective plurality of enterprise trust servers.

Dependencies are inferred from the claim text.

System and method for identifying software changes

Life of this patent

System and method for identifying software changes

Life of this patent

Abstract

Claims21