×

Advanced asset tracking and correlation

  • US 10,523,713 B2
  • Filed: 07/09/2018
  • Issued: 12/31/2019
  • Est. Priority Date: 02/17/2015
  • Status: Active Grant
First Claim
Patent Images

1. A system for identifying target assets, the system comprising:

  • an asset correlation engine executable by one or more computing device processors and in communication with an asset database,wherein the asset database is operable to store asset entries, wherein at least one asset entry in the asset database is associated with an asset, andwherein the asset correlation engine is operable to;

    access a correlation metric, the correlation metric comprising;

    attributes, wherein at least one attribute is associated with a particular attribute weight, andexclusionary rules associated with the attributes, wherein the exclusionary rules are based on a single attribute value or a range of attribute values;

    receive a data chunk associated with a target asset of a network, wherein the target asset comprises at least one of a desktop workstation, a server, a laptop, a tablet, a mobile phone, an application, a virtual machine, and a computing device;

    parse the data chunk to identify an attribute associated with the data chunk, wherein the attribute comprises at least one of an IP address attribute, a DNS name attribute, a network attribute, an operating system attribute, a NetBIOS name attribute, an agent identification, a software attribute, a hardware attribute, and an instance identification;

    determine, based on accessing the exclusionary rules associated with the attributes, whether the attribute is excludable;

    in response to determining the attribute is not excludable, determining, based on accessing the correlation metric, an attribute weight associated with the attribute;

    generate, based on the attribute weight associated with the attribute, target asset information, wherein a second attribute excluded by the exclusionary rules is not used in generating the target asset information;

    determine, based on the target asset information, whether the data chunk matches an asset entry in the asset database; and

    in response to determining the data chunk at least partially matches the asset entry in the asset database, associate the data chunk with the asset entry in the asset database.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×