Back to results
US 2023/0267201 A1Published application
Method to prevent root level access attack and measurable sla security and compliance platform
AssigneeCyemptive Technologies, Inc.
InventorsRobert Pike, Gary Zelanko, Bryan Greene
Life of this patent
Estimating the term…
Abstract
A compliance monitor measures metrics regarding one or more managed devices in a network. The compliance monitor generates a log based on the information detected by the measurement trackers and to transmit a report based on the generated log to a recipient. The compliance monitor also initiates one or more security actions based on the one or more measurement trackers indicating that a measured metric exceeds an associated threshold measurement value.
Claims20
A method comprising
- receiving, from a plurality of devices in a managed network, logged information describing activity of the plurality of devices in the managed network;
- computing a first set of values for a set of security compliance metrics for the managed network based on the received logged information;
- comparing, at a first time, each of the first set of values for the set of security compliance metrics to a threshold value corresponding to each value;
- identifying a security compliance metric of the set of security compliance metrics that is out of compliance with a service level agreement based on the comparing;
- receiving additional logged information from the plurality of devices;
- computing, at a second time later than the first time, a second set of values for the set of security compliance metrics based on the additional logged information;
- comparing each of the second set of values for the set of security compliance metrics to the threshold value corresponding to each value;
- determining that the identified security compliance metric that is in compliance with the service level agreement based on the comparing of the second set of values;
- computing a time to compliance for the managed network based on the first time, the second time, the logged information, and the additional logged information;
- comparing the time to compliance to a threshold value;
- and
- initiating, responsive to the time to compliance exceeding the threshold value, a security action.
9 more elements
A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:
- receiving, from a plurality of devices in a managed network, logged information describing activity of the plurality of devices in the managed network;
- computing a first set of values for a set of security compliance metrics for the managed network based on the received logged information;
- comparing, at a first time, each of the first set of values for the set of security compliance metrics to a threshold value corresponding to each value;
- identifying a security compliance metric of the set of security compliance metrics that is out of compliance with a service level agreement based on the comparing;
- receiving additional logged information from the plurality of devices;
- computing, at a second time later than the first time, a second set of values for the set of security compliance metrics based on the additional logged information;
- comparing each of the second set of values for the set of security compliance metrics to the threshold value corresponding to each value;
- determining that the identified security compliance metric that is in compliance with the service level agreement based on the comparing of the second set of values;
- computing a time to compliance for the managed network based on the first time, the second time, the logged information, and the additional logged information;
- comparing the time to compliance to a threshold value;
- and
- initiating, responsive to the time to compliance exceeding the threshold value, a security action.
9 more elements
Dependencies are inferred from the claim text.