Back to results
US 8,997,201 B2Granted
Integrity monitoring to detect changes at network device for use in secure network access
AssigneeCisco Technology, Inc.
InventorBrian Wotring
Life of this patent
Estimating the term…
Abstract
In one embodiment, a method includes initiating integrity monitoring at a network device, continuously monitoring the network device to detect changes at the network device over a period of time, and transmitting information collected during said integrity monitoring to a security device for use in determining if the network device is allowed access to a trusted network. An apparatus and logic are also disclosed.
Claims18
A method comprising:
- initiating integrity monitoring of a network device by an agent at the network device;
- continuously monitoring the network device by the agent to detect changes at the network device over a period of time that may indicate possible security threats or policy noncompliance;
- requesting access to a trusted network by the network device;
- and
- transmitting from the agent, a posture assessment report comprising information collected during said integrity monitoring including said changes detected at the network device over said period of time, to a security device located within a data path between the network device and the trusted network, for use in determining if the network device is allowed access to the trusted network;
- wherein monitoring comprises monitoring the network device before the network device requests access to the trusted network.
3 more elements
An apparatus comprising:
- a processor for initiating integrity monitoring of a network device by an agent at the network device, continuously monitoring the network device by the agent to detect changes at the network device over a period of time that may indicate possible security threats or policy noncompliance, requesting access to a trusted network by the network device, and transmitting from the agent, a posture assessment report comprising information collected during said integrity monitoring including said changes detected at the network device over said period of time, to a security device located within a data path between the apparatus and the trusted network, for use in determining if the network device is allowed access to the trusted network;
- and
- memory for storing said information collected during said integrity monitoring;
- wherein monitoring comprises monitoring the network device before the network device requests access to the trusted network.
1 more element
Logic encoded on one or more non-transitory computer readable media for execution and when executed operable to:
- initiate integrity monitoring of a network device by an agent at the network device;
- continuously monitor the network device by the agent to detect changes at the network device over a period of time that may indicate possible security threats or policy noncompliance;
- request access to a trusted network by the network device;
- and
- transmit by the agent, a posture assessment report comprising information collected during said integrity monitoring including said changes detected at the network device over said period of time, to a security device located within a data path between the network device and the trusted network, for use in determining if the network device is allowed access to the trusted network;
- wherein monitoring comprises monitoring the network device before the network device requests access to the trusted network.
3 more elements
Dependencies are inferred from the claim text.