Back to results
US 2019/0319987 A1Published application
Interface for network security marketplace
AssigneeSophos Limited
InventorsJoseph H. Levy, Andrew J. Thomas, Daniel Salvatore Schiappa, Kenneth D. Ray
Life of this patent
Estimating the term…
Abstract
An interface for a threat management facility of an enterprise network supports the use of third-party security products within the enterprise network by providing access to relevant internal instrumentation and/or a programmatic interface for direct or indirect access to local security agents on compute instances within the enterprise network.
Claims20
A computer program product comprising computer executable code embodied in a non-transitory computer-readable medium that, when executing on a threat management facility for an enterprise network, performs the steps of:
- providing a first interface of the threat management facility for monitoring activity on a plurality of compute instances associated with the enterprise network;
- providing a second interface of the threat management facility for communications with local security agents on the compute instances that provide local security to the compute instances against malicious network activity;
- providing a third interface of the threat management facility providing programmatic access to the threat management facility by one or more resources outside the enterprise network;
- and
- providing a security system for use of third party security resources within the enterprise network, the security system configured to controllably expose data available through the first interface to a remote user accessing the threat management facility through the third interface, and the security system further configured to controllably expose configuration of the local security agents accessible through the second interface to the remote user through the third interface.
2 more elements
A method comprising:
- monitoring activity on a plurality of compute instances associated with an enterprise network through a first interface of a threat management facility;
- communicating with local security agents on the compute instances through a second interface of the threat management facility;
- providing programmatic access to the threat management facility by one or more resources outside the enterprise network through a third interface of the threat management facility;
- and
- operating a security system on the threat management facility, the security system configured to controllably expose data available through the first interface to a remote user accessing the threat management facility through the third interface, and the security system further configured to controllably expose configuration of the local security agents accessible through the second interface to the remote user through the third interface.
2 more elements
A system comprising:
- a threat management facility for compute instances in an enterprise network;
- a first interface of the threat management facility for monitoring activity on the compute instances;
- a second interface of the threat management facility for communications with local security agents on the compute instances that provide local security to the compute instances against malicious network activity;
- a third interface of the threat management facility providing programmatic access to the threat management facility by one or more resources outside the enterprise network;
- and
- a security system within the threat management facility, the security system configured to controllably expose data available through the first interface to a remote user accessing the threat management facility through the third interface, and the security system further configured to controllably expose configuration of the local security agents accessible through the second interface to the remote user through the third interface.
3 more elements
Dependencies are inferred from the claim text.