# US 8,572,678 B2 · Security policy flow down system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,572,678 B2 - Document ID: US8572678B2 - Status: Granted - Kind: B2 - Application number: 13/336,737 - Filed: 2011-12-23 - Published: 2013-06-27 - Granted: 2013-10-29 - Earliest claimed: 2011-12-23 - Assignees: Lockheed Martin Corporation - Applicants: Bruce Barnett; Scott Evans; Robert James Mitchell, Jr.; Thomas Markham; Stephen Dill; Vincent Hannon; John Patrick Elliott; Andrew Crapo - Inventors: Bruce Barnett; Scott Evans; Robert James Mitchell, Jr.; Thomas Markham; Stephen Dill; Vincent Hannon; John Patrick Elliott; Andrew Crapo - Web page: https://patentgrep.com/patent/US8572678B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system and method are provided that distill an organization's information security plan into a detailed and unambiguous security object model. The developed security object model provides a visualization of complex relationships between individual elements and levels that is usable to carry into effect the organization's information security plan. Configuration control and a verifiable level of security compliance are provided through implementation of the organization's information security plan by the developed security object model. The developed security object model is hosted on a computing platform in communication with at least the organization's network to provide information security plan compliance, configuration control and gap analysis in a usable form to the organization. ## Claims ### Claim 1 A method for automated implementation of an information security plan for a network, comprising: employing a standardized general-purpose modeling scheme to generate an object model from a written information security plan, elements forming the object model including at least identification of a risk, a security policy, a domain, a component within the domain and an actor; storing the generated object model in a data storage device associated with a processor; probing the network with the processor using the stored object model to determine network compliance with the information security plan; and outputting a result of the probing to a user, the output result employing the object model to display at least a visualization of relationships of the information security plan implementation to an individual component level in the network. ### Claim 2 (depends on 1) The method of claim 1, wherein the standardized general-purpose modeling scheme employs at least one of Unified Modeling Language (UML), Web Ontology Language (OWL), or any other formal modeling language capable of rendering the model computable. ### Claim 3 (depends on 1) The method of claim 1, the output result further comprising an alert to the user that the object model has detected that one or more components in the network is not in compliance with the information security plan. ### Claim 4 (depends on 1) The method of claim 1, further comprising: employing the object model to effect a change in configuration of one or more components in the network; applying the object model to assess an impact of the change on the network and other network components; and employing the object model to modify configurations of other network components to maintain compatibility with the change in configuration of the one or more components. ### Claim 5 (depends on 1) The method of claim 1, the output result further comprising a report of network compliance with the information security plan based on an overall network evaluation using the object model. ### Claim 6 (depends on 1) The method of claim 1, further comprising updating the object model when the information security plan changes. ### Claim 7 (depends on 1) The method of claim 1, wherein the generated object model is used to probe multiple networks. ### Claim 8 (depends on 1) The method of claim 1, wherein the probing the network uses the generated object model to assess at least of anti-virus and password compliance for individual components of the network. ### Claim 9 A system for implementing an automated information security plan in a network, comprising: at least one storage device storing an object model that is generated using a standardized general-purpose modeling scheme and is based on the information security plan, elements forming the object model including at least identification of a risk, a security policy, a domain, a component within the domain and an actor; a processor that is programmed to use the stored object model to probe the network and to determine network compliance with the information security plan based on the use of the stored object model; and an output device that outputs a result of the probe of the network and the determination to a user, the output result employing the stored object model to display at least a visualization of relationships of the information security plan implementation to an individual component level in the network. ### Claim 10 (depends on 9) The system of claim 9, wherein the object model is one of a Unified Modeling Language (UML) object model, a Web Ontology Language (OWL) ontology or set of ontologies, or an object model in any formal modeling language capable of rendering the model computable. ### Claim 11 (depends on 9) The system of claim 9, the output device further outputting an alert to the user that application of the object model by the processor detected that one or more components in the network is not in compliance with the information security plan. ### Claim 12 (depends on 9) The system of claim 9, wherein the processor is further programmed to (1) employ the object model to effect a change in configuration of one or more components in the network, (2) apply the object model to assess an impact of the change in the configuration of one or more components, and (3) employ the object model to modify configurations of other network components to maintain compatibility with the change in configuration of the one or more components. ### Claim 13 (depends on 9) The system of claim 9, the output device further outputting a report of network compliance with the information security plan based on an overall evaluation of the network using the object model. ### Claim 14 (depends on 9) The system of claim 9, further comprising at least one of a user interface and an external data exchange port by which the user updates the object model. ### Claim 15 (depends on 9) The system of claim 9, the processor being further programmed to update the object model when the information security plan changes. ### Claim 16 (depends on 9) The system of claim 9, wherein the processor is connected to multiple networks to perform an evaluation of the multiple networks using the object model. ### Claim 17 (depends on 9) The system of claim 9, wherein the processor uses the object model to assess at least of anti-virus and password compliance for individual components of the network. ### Claim 18 A non-transitory computer-readable medium storing instructions which, when executed by a processor, cause the processor to execute a method for automated implementation of an information security plan for a network, the method comprising: employing a standardized general-purpose modeling scheme to generate an object model from a written information security plan, elements forming the object model include at least identification of a risk, a security policy, a domain, a component within the domain and an actor; storing the generated object model in a data storage device associated with the processor; probing the network using the stored object model to determine network compliance with the information security plan; and outputting a result of the probing to a user, the output result employing the object model to display a visualization of relationships of the information security plan implementation to an individual component level in the network. ### Claim 19 (depends on 18) The non-transitory computer-readable medium of claim 18, the output result further comprising an alert to the user that the object model has detected that one or more components in the network is not in compliance with the information security plan. ### Claim 20 (depends on 18) The non-transitory computer-readable medium of claim 18, the method further comprising: employing the object model to effect a change in configuration of one or more components in the network; applying the object model to assess an impact of the change on the network and other network components; and employing the object model to modify configurations of the other network components to maintain compatibility with the change in configuration of the one or more components. ### Claim 21 (depends on 18) The non-transitory computer-readable medium of claim 18, the output result further comprising a report of network compliance with the information security plan based on an overall network evaluation using the object model. ### Claim 22 (depends on 18) The non-transitory computer-readable medium of claim 18, the method further comprising updating the object model when the information security plan changes. ### Claim 23 (depends on 18) The non-transitory computer-readable medium of claim 18, the generated object model being used to probe multiple networks.