Network security server suitable for unified communications network
AssigneeVibeSec Ltd.
InventorsShimon Gruper, Gil Blumenfeld, Zeev Pritzker, Shlomi Amor
Life of this patent
Estimating the term…
Abstract
A network security server constituted of: a device detection functionality, the device detection functionality arranged to detect devices on a network on an ongoing basis; a state extraction functionality arranged to read the state of each of the detected devices; an abstraction functionality arranged to translate each of the read states to a common abstract format; a state analysis functionality arranged to compare each of the translated read states with a predetermined database of states; and a session control functionality arranged to control communication of each of the detected devices responsive to the comparison with the predetermined database of states.
Claims22
A network security server comprising:
- a device detection functionality, said device detection functionality arranged to detect devices on a network on an ongoing basis;
- a state extraction functionality arranged to read the state of each of the detected devices;
- a store functionality arranged to store a representation of the read state for each of the detected devices;
- a compare functionality arranged to compare a representation of the present state of each of the detected devices to the respective stored state representation of each of the detected devices and identify any state changes for each of the detected devices responsive to the comparison of the present state with the stored state;
- a state risk analysis functionality in communication with said compare functionality, said state risk analysis functionality arranged to compare the representation of the read state for each of the detected devices with a predetermined database of states and to output security risk information associated with a device identifier for each of the detected devices, said security risk information responsive to said comparison with the predetermined database of states and further responsive to said identified state changes of said compare functionality;
- and
- a session control functionality in communication with said state risk analysis functionality and arranged to control communication of each of the detected devices responsive to the device identifier and said security risk information.
A non-transitory computer-readable medium containing instructions for controlling an electronic device to perform a method of network security, the method comprising:
- detecting, on an ongoing basis, devices on a network;
- reading the state of each of said detected devices;
- storing a representation of said read state for each of said detected devices;
- comparing a representation of the present read state to the respective stored state representation for each of said detected devices;
- identifying any state change for each of said detected devices responsive to said comparing of the present read state representation with the stored state representation;
- comparing the representation of each of the present read states with a predetermined database of states;
- outputting security risk information associated with a device identifier for each of said detected devices, said security risk information responsive to said comparing with the predetermined database of states and further responsive to said identified stage changes;
- and
- controlling communication of each of said detected devices responsive to said output security risk information and device identifier.
Dependencies are inferred from the claim text.