Methods, systems and computer program products for providing status information to a device attached to an information infrastructure

• US 20050044212A1
• Filed: 08/22/2003
• Published: 02/24/2005
• Est. Priority Date: 08/22/2003
• Status: Active Grant

• Current Assignee: Trend Micro Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Lingafelt, Steven, Marko, Gerald
• Granted Patent: US 7,467,201 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

Methods, systems and computer program products provide status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device. The device monitoring application utilizes signature data to monitor data associated with the device and selectively provide messages based on a correspondence between signature data and data associated with the device. A message signature is incorporated in the signature data. Data associated with the device is monitored utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data. A status message is provided utilizing the device monitoring application if the presence of the message signature is detected in the monitored data.

Claims

1. A method of providing status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device, the device monitoring application utilizing signature data to monitor data associated with the device and selectively provide messages based on a correspondence between signature data and data associated with the device, comprising:

incorporating a message signature in the signature data;

monitoring data associated with the device utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data; and

providing a status message utilizing the device monitoring application if the presence of the message signature is detected in the monitored data.

2. The method of claim 1, further comprising identifying an internet protocol (IP) address for one or more devices that are not registered with the information technology infrastructure.

3. The method of claim 2, further comprising sending the message signature to the identified IP address.

4. The method of claim 1, wherein the device monitoring application comprises an antivirus application.

5. The method of claim 4, wherein the message signature comprises a non-virus communication.

6. The method of claim 1, wherein providing a status message comprises providing a request to register the device in the information technology infrastructure.

7. The method of claim 1, wherein providing a status message comprises providing instructions to register the device in the information technology infrastructure.

8. The method of claim 1, wherein providing a status message comprises providing an emergency message.

9. The method of claim 1, wherein the device monitoring application comprises an intrusion detection application.

10. The method of claim 1, wherein the device monitoring application comprises a firewall application.

11. The method of claim 1, wherein the monitoring data associated with the device comprises monitoring incoming data received by the device.

12. A computer program product for providing status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device, the device monitoring application utilizing signature data to monitor data associated with the device and selectively provide messages based on a correspondence between signature data and data associated with the device, the computer program product comprising:

a computer readable medium having computer readable program code embodied therein, the computer readable program code comprising;

computer readable program code that is configured to incorporate a message signature in the signature data;

computer readable program code that is configured to monitor data associated with the device utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data; and

computer readable program code that is configured to provide a status message utilizing the device monitoring application if the presence of the message signature is detected in the monitored data.

13. The computer program product of claim 12, further comprising computer readable program code that is configured to identify an internet protocol (IP) address for one or more devices that are not registered with the information technology infrastructure.

14. The computer program product of claim 13, further comprising computer readable program code that is configured to send the message signature to the identified IP address.

15. The computer program product of claim 12, wherein the device monitoring application comprises an antivirus application.

16. The computer program product of claim 15, wherein the message signature comprises a non-virus communication.

17. A system for providing status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device, the device monitoring application utilizing signature data to monitor data associated with the device and selectively provide messages based on a correspondence between signature data and data associated with the device, comprising:

means for incorporating a message signature in the signature data;

means for monitoring data associated with the device utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data; and

means for providing a status message utilizing the device monitoring application if the presence of the message signature is detected in the monitored data.

18. The system of claim 17, further comprising means for identifying an internet protocol (IP) address for one or more devices that are not registered with the information technology infrastructure.

19. The system of claim 18, further comprising means for sending the message signature to the identified IP address.

20. The system of claim 17, wherein the device monitoring application comprises an antivirus application.

21. The system of claim 20, wherein the message signature comprises a non-virus communication.

22. A method of communicating registration information in an information technology infrastructure comprising:

using antivirus software to communicate registration information to an unregistered device in the information technology infrastructure.

23. The method of claim 22, wherein using antivirus software to communicate registration information further comprises:

using antivirus software to detect a message signature and to communicate registration information to the unregistered device when the message signature is detected.