System and method for securing networks

• US 20050172153A1
• Filed: 07/06/2004
• Published: 08/04/2005
• Est. Priority Date: 07/11/2003
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Groenendaal, Johan van de
• Granted Patent: US 8,225,379 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor

Abstract

A method for securing a network including providing one or more information sources, identifying one or more devices on the network using the information sources and determining whether identified devices are authorized.

Claims

1. A method for securing a network, comprising:

providing one or more information sources;

identifying one or more devices on the network using said one or more information sources; and

determining whether identified devices are authorized to be on the network.

2. The method for securing a network of claim 1, further comprising determining whether identified devices comply with a predetermined policy.

3. The method for securing a network of claim 1, further comprising determining a location of one or more of said identified devices.

4. The method for securing a network of claim 1, wherein one or more of said information sources are wire line sensors.

5. The method for securing a network of claim 1, wherein one or more of said information sources are wireless sensors.

6. The method for securing a network of claim 1, wherein one or more of said information sources are location aware wireless sensors.

7. The method for securing a network of claim 1, wherein a wireless unit intent algorithm is used to correlate information from said information sources.

8. The method for securing a network of claim 1, wherein a realm bridged detection algorithm is used to correlate information from said information sources.

9. The method for securing a network of claim 1, wherein radio frequency informatics are used to collect and analyze information.

10. The method for securing a network of claim 1, wherein network informatics are used to collect and analyze information.

11. A system for securing a network, comprising:

a providing unit for providing one or more information sources;

an identifying unit for identifying one or more devices on the network using said one or more information sources; and

an authorization-determining unit for determining whether identified devices are authorized to be on the network.

12. The system for securing a network of claim 11, further comprising a policy-determining unit for determining whether identified devices comply with a predetermined policy.

13. The system for securing a network of claim 11, further comprising a location-determining unit for determining a location of one or more of said identified devices.

14. The system for securing a network of claim 11, wherein one or more of said information sources are wire line sensors.

15. The system for securing a network of claim 11, wherein one or more of said information sources are wireless sensors.

16. The system for securing a network of claim 11, wherein one or more of said information sources are location aware wireless sensors.

17. The system for securing a network of claim 11, wherein a wireless unit intent algorithm is used to correlate information from said information sources.

18. The system for securing a network of claim 11, wherein a realm bridged detection algorithm is used to correlate information from said information sources.

19. The system for securing a network of claim 11, wherein radio frequency informatics are used to collect and analyze information.

20. The system for securing a network of claim 11, wherein network informatics are used to collect and analyze information.

21. A computer system comprising:

a processor; and

a program storage device readable by the computer system, embodying computer executable code for securing a network, the program storage device comprising;

code for providing one or more information sources;

code for identifying one or more devices on the network using said one or more information sources;

code for determining whether identified devices are authorized to be on the network.

22. The computer system for securing a network of claim 21, further comprising code for determining whether identified devices comply with a predetermined policy.

23. The computer system for securing a network of claim 21, further comprising code for determining a location of one or more of said identified devices.

24. The computer system for securing a network of claim 21, wherein one or more of said information sources are wire line sensors.

25. The computer system for securing a network of claim 21, wherein one or more of said information sources are wireless sensors.

26. The computer system for securing a network of claim 21, wherein one or more of said information sources are location aware wireless sensors.

27. The computer system for securing a network of claim 21, wherein a wireless unit intent algorithm is used to correlate information from said information sources.

28. The computer system for securing a network of claim 21, wherein a realm bridged detection algorithm is used to correlate information from said information sources.

29. The computer system for securing a network of claim 21, wherein radio frequency informatics are used to collect and analyze information.

30. The computer system for securing a network of claim 21, wherein network informatics are used to collect and analyze information.

31. A computer recording medium including computer executable code for securing a network, comprising:

code for providing one or more information sources;

code for identifying one or more devices on the network using said one or more information sources; and

code for determining whether identified devices are authorized to be on the network.

32. The computer recording medium of claim 31, further comprising determining whether identified devices comply with a predetermined policy.

33. The computer recording medium of claim 31, further comprising determining a location of one or more of said identified devices.

34. The computer recording medium of claim 31, wherein one or more of said information sources are wire line sensors.

35. The computer recording medium of claim 31, wherein one or more of said information sources are wireless sensors.

36. The computer recording medium of claim 31, wherein one or more of said information sources are location aware wireless sensors.

37. The computer recording medium of claim 31, wherein a wireless unit intent algorithm is used to correlate information from said information sources.

38. The computer recording medium of claim 31, wherein a realm bridged detection algorithm is used to correlate information from said information sources.

39. The computer recording medium of claim 31, wherein radio frequency informatics are used to collect and analyze information.

40. The computer recording medium of claim 31, wherein network informatics are used to collect and analyze information.