US 2019/0297055 A1 · AUTOMATED LEARNING OF EXTERNALLY DEFINED NETWORK ASSETS BY A NETWORK SECURITY DEVICE

Abstract

Systems and methods for automated learning of externally defined network assets by a network security device are provided. According to one embodiment, updated information for a network asset associated with a private network is received by a network security device from an external asset management device associated with the private network. The updated information includes a change in a definition or an attribute of the network asset. The existence of a current definition and attribute information for the network asset is determined by the network security device. The current definition and attribute information is dynamically updated based on the updated information by the network security system within a run-time representation of security policy rules within a kernel of a network security operating system without disrupting on-going application of one or more security policy rules defined for the network asset to network traffic directed to or originated by the network asset.

Claims20

Dependent claims

A method comprising:

receiving, by a network security device associated with a private network, updated information associated with a network asset associated with the private network from an external asset management device associated with the private network, wherein the updated information includes a change in a definition or an attribute of the network asset;
determining, by the network security device, existence of a current definition and attribute information for the network asset;
and
without disrupting on-going application of a plurality of security policy rules, including one or more security policy rules defined for the network asset and relating to network traffic directed to or originated by the network asset, by the network security device, dynamically updating, by the network security device, the current definition and attribute information within a run-time representation of the one or more security policy rules within a kernel of a network security operating system of the network security device based on the updated information.

1 more element

A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processors of a network security device associated with a private network, causes the one or more processors to perform a method comprising:

receiving updated information associated with a network asset associated with the private network from an external asset management device associated with the private network, wherein the updated information includes a change in a definition or an attribute of the network asset;
determining existence of a current definition and attribute information for the network asset;
and
without disrupting on-going application of a plurality of security policy rules, including one or more security policy rules defined for the network asset and relating to network traffic directed to or originated by the network asset, dynamically updating the current definition and attribute information within a run-time representation of the one or more security policy rules within a kernel of a network security operating system of the network security device based on the updated information.

1 more element

Dependencies are inferred from the claim text.

Automated learning of externally defined network assets by a network security device

Life of this patent

Automated learning of externally defined network assets by a network security device

Life of this patent

Abstract

Claims20