System and method for providing security profile information to a user of a computer system

• US 20020095572A1
• Filed: 01/12/2001
• Published: 07/18/2002
• Est. Priority Date: 01/12/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Daigle, Brian K., Frank, Mitchell R., Daniell, William T.
• Application Number:
  US09/759,428
• Publication Number:
  US 20020095572A1
• Time in Patent Office: Days
• US Class Current: 713/166
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

A system for providing security profile information to a user of a computer system utilizes memory and a security application. The security application displays a list of security rules for locking down resources of a computer system. A user then defines a security profile of the computer system by identifying which of the security rules should be enabled. If desired, the user may select any one of the displayed rules in order to obtain more information pertaining to the selected rule. In response, the security application displays more information describing the selected rule so that the user can make a better decision about whether the selected security rule should be enabled. Upon activation of the security profile, the security application modifies a machine state of the computer system to cause the computer system to begin enforcing the enabled security rules.

Claims

1. A computer system, comprising:

memory; and

a security application configured to display a list of security rules for locking down resources of said computer system, said security application configured to enable a set of said security rules, based on inputs from a user, and to cause said computer system to enforce said enabled set of security rules by modifying a machine state of said computer system, said security application further configured to enable said user to select one of said security rules and to display information describing said selected rule in response to a selection of said one rule by said user, said information based on data stored in said memory.

2. The system of claim 1, wherein said security application is configured to display said information immediately in response to said selection.

3. The system of claim 1, wherein said security application is configured to display said list within a window, said window including a plurality of selectable icons, said security application further configured to display different sets of information describing said selected rule in response to selections of different ones of said icons.

4. The system of claim 1, wherein said security application is configured to display a main window, said security application further configured to display rules of said list in a first sub-window of said main window and to display said information describing said selected rule in a second sub-window of said main window

5. The system of claim 4, wherein said security application is configured to categorize said list of rules, said security application further configured to display categories of said rules in a third sub-window of said main window.

6. The system of claim 5, wherein said security application is configured to enable said user to select one of said categories and is configured to display, in said first sub-window, rules of said list that are associated with one of said categories presently selected by said user.

7. The system of claim 6, wherein said main window includes a plurality of selectable icons, said security application further configured to display in said second sub-window different sets of information describing said selected rule in response to selections of different ones of said icons.

8. A computer system, comprising:

means fordisplaying a list of security rules for locking down resources of said computer system;

means for receiving inputs from a user of said computer system;

means for enabling a set of said security rules based on said inputs from said user;

means for enforcing said enabled set of security rules;

means for selecting one of said security rules from said displayed list; and

means for displaying information describing said selected rule in response to a selection of said one rule by said selecting means.

9. A method for locking down resources of computer systems, comprising the steps of:

displaying a list of security rules for locking down resources of a computer system;

receiving inputs from a user of said computer system;

enabling a set of said security rules based on said inputs from said user;

enforcing said enabled set of security rules;

selecting one of said security rules from said displayed list; and

displaying information describing said selected rule in response to said selecting step.

10. The method of claim 9, wherein said displaying said information step is performed immediately in response to said selecting step.

11. The method of claim 9, wherein said displaying said information step further includes the step of displaying said information within a window, said window having selectable icons, said method further comprising the steps of:

selecting one of said icons; and

displaying other information describing said selected rule in response to said selecting one of said icons step.

12. The method of claim 9, wherein said displaying steps further comprise the steps of:

displaying a main window;

displaying rules of said list in a first sub-window of said main window; and

displaying said information describing said selected rule in a second sub-window of said main window.

13. The method of claim 12, further comprising the steps of:

categorizing said list of rules; and

displaying categories of said rules in a third sub-window of said main window.

14. The method of claim 13, further comprising the steps of:

selecting one of said categories,

wherein said displaying a list of security rules step includes the step of displaying, in said first sub-window and in response to said selecting one of said categories step, rules of said list that are associated with said one category.

15. The method of claim 14, wherein said displaying said main window step includes the step of displaying a plurality of selectable icons, and wherein said method further comprises the steps of:

selecting one of said icons; and

displaying, in said second sub-window, other information describing said selected rule in response to said selecting one of said icons step.