US 2015/0033348 A1 · SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR PROVIDING MULTIPLE REMEDIATION TECHNIQUES

Abstract

A system, method, and computer program product are provided for a database associating a plurality of device vulnerabilities to which computing devices can be subject with a plurality of remediation techniques that collectively remediate the plurality of device vulnerabilities. Each of the device vulnerabilities is associated with at least one remediation technique. Each remediation technique associated with a particular device vulnerability remediates that particular vulnerability. Further, each remediation technique has a remediation type are selected from the type group consisting of patch, policy setting, and configuration option. Still yet, a first one of the device vulnerabilities is associated with at least two alternative remediation techniques.

Claims21

Dependent claims

1-2. (canceled)

A computer program product embodied on a non-transitory computer readable medium, comprising:

code for accessing at least one data structure associating information corresponding to a plurality of weaknesses to which devices can be subject, with a plurality of remediation techniques that remediate the plurality of weaknesses, such that:
the information corresponding to each of the weaknesses is associated with at least one remediation technique;
each remediation technique associated with the information corresponding to a particular weakness remediates the particular weakness;
each remediation technique has a remediation type including at least one of installation of software, a policy setting, or a configuration option;
and
the information corresponding to at least one of the weaknesses is associated with at least two remediation techniques;
and
a single client agent executable by a processor for:
identifying at least one aspect of at least one of the devices that is a basis for the at least one weakness;
determining that the at least one device is subject to the at least one weakness, based on the at least one aspect of the at least one device;
automatically applying at least one of the at least two remediation techniques to the at least one device, based on the determination;
and
reporting the application of the at least one of the at least two remediation techniques to the at least one device.

10 more elements

A computer program product embodied on a non-transitory computer readable medium, comprising:

code for accessing at least one data structure identifying a plurality of remediation techniques that remediate the plurality of weaknesses, where:
each of the remediation techniques remediates at least one of the plurality of weaknesses;
each remediation technique has a remediation type including at least one of installation of software, a policy setting, or a configuration option,
such that the data structure identifies:
a first remediation technique that remediates a first particular weakness by installing software for removing the first particular weakness;
a second remediation technique that remediates a second particular weakness by affecting a service for removing the second particular weakness;
and
a third remediation technique that remediates a third particular weakness by changing a configuration option or policy setting for removing the third particular weakness;
code for:
identifying a first aspect of the at least one device that is a basis for the first particular weakness, utilizing the client agent;
determining whether the at least one device is subject to the first particular weakness, based on the first aspect of the at least one device and the at least one data structure;
conditionally applying the first remediation technique to the at least one device by installing the software for removing the first particular weakness utilizing the client agent, based on the determination whether the at least one device is subject to the first particular weakness;
identifying a second aspect of the at least one device that is a basis for the second particular weakness, utilizing the client agent;
determining whether the at least one device is subject to the second particular weakness, based on the second aspect of the at least one device and the at least one data structure;
conditionally applying the second remediation technique to the at least one device by affecting the service for removing the second particular weakness utilizing the client agent, based on the determination whether the at least one device is subject to the second particular weakness;
identifying a third aspect of the at least one device that is a basis for the third particular weakness, utilizing the client agent;
determining whether the at least one device is subject to the third particular weakness, based on the third aspect of the at least one device and the at least one data structure;
and
conditionally applying the third remediation technique to the at least one device by changing the configuration option or policy setting for removing the third particular weakness utilizing the client agent, based on the determination whether the at least one device is subject to the third particular weakness.

16 more elements

A computer program product embodied on a non-transitory computer readable medium, comprising:

code for accessing at least one data structure identifying a plurality of remediation techniques that remediate the plurality of weaknesses, where:
each of the remediation techniques remediates at least one of the plurality of weaknesses;
each remediation technique has a remediation type including at least one of installation of software, a policy setting, or a configuration option,
such that the data structure identifies:
a first remediation technique that remediates a first particular weakness by installing software for removing the first particular weakness;
a second remediation technique that remediates a second particular weakness by affecting a service for removing the second particular weakness;
and
a third remediation technique that remediates a third particular weakness by changing a configuration option for removing the third particular weakness;
code executable by a processor for:
identifying a first aspect of at least one of a plurality of devices that is a basis for the first particular weakness;
determining whether the at least one device is subject to the first particular weakness, based on the first aspect of the at least one device;
conditionally applying the first remediation technique to the at least one device by installing the software for removing the first particular weakness, based on the determination whether the at least one device is subject to the first particular weakness;
reporting completion of the application of the first remediation technique conditioned upon the completion thereof;
identifying a second aspect of the at least one device that is a basis for the second particular weakness;
determining whether the at least one device is subject to the second particular weakness, based on the second aspect of the at least one device;
conditionally applying the second remediation technique to the at least one device by affecting the service for removing the second particular weakness, based on the determination whether the at least one device is subject to the second particular weakness;
reporting completion of the application of the second remediation technique conditioned upon the completion thereof;
identifying a third aspect of the at least one device that is a basis for the third particular weakness;
determining whether the at least one device is subject to the third particular weakness, based on the third aspect of the at least one device;
conditionally applying the third remediation technique to the at least one device by changing the configuration option for removing the third particular weakness, based on the determination whether the at least one device is subject to the third particular weakness;
reporting completion of the application of the second remediation technique conditioned upon the completion thereof;
identifying a request for a network resource by the at least one networked device;
and
after the identification of the request for the network resource, causing a reaction to the request for the network resource, based the reporting.

21 more elements

Dependencies are inferred from the claim text.

Facts

Application

14/499,227Filed 28 Sep 2014

Priority

1 Jul 2003

Published

29 Jan 2015

Term ends

Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis
G06F 21/57
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: certifying or…
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
H04L 63/1416
By monitoring network traffic: event detection, e.g. attack signature detection

Family

Application60/484,085Us provisional application · filed 1 Jul 2003

Application10/882,852Continuation · filed 1 Jul 2004

Application14/138,014Continuation in part · filed 21 Dec 2013

Application14/499,227Continuation in part

Application14/138,014Continuation

US 2005/0005171 A1Published application

US 2006/0230441 A2Published application

US 2007/0113272 A2Published application

US 2014/0109230 A1Published application

US 9,117,069 B2Related patent

US 2015/0033348 A1This patent

From the US filing history. Foreign family members aren’t listed.

System, method, and computer program product for providing multiple remediation techniques

Life of this patent

System, method, and computer program product for providing multiple remediation techniques

Life of this patent

Abstract

Claims21