Server security schema
First Claim
1. A system that facilitates organizing server security-related information, comprising:
- a server security schema configuration component that facilitates identification of expertise related to the server-related information; and
a server security schema component that groups the sever-related information into a plurality of server security-related categories associated with a server.
2 Assignments
0 Petitions
Accused Products
Abstract
A server security schema that can incorporate server security-related expertise into an information model is provided. The novel server security schema component can be applied to an application server, a web server and/or a database server to converge knowledge into securing the server by identifying categories, vulnerabilities, threats, attacks and countermeasures. The novel schema can create a common framework that converges knowledge with respect to any server type. More particularly, the novel server security schema can address server categories including a share, a service, an account, an audit and log, a file and directory, a registry, a protocol, a port, and a patch and update category.
-
Citations
20 Claims
-
1. A system that facilitates organizing server security-related information, comprising:
-
a server security schema configuration component that facilitates identification of expertise related to the server-related information; and
a server security schema component that groups the sever-related information into a plurality of server security-related categories associated with a server. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A computer-implemented method of modeling security of a server, comprising:
-
identifying a server security category component related to the server; and
incorporating the server security category component into a server security schema component that leverages security-related expertise. - View Dependent Claims (13, 14, 15, 16, 17)
-
-
18. A computer-executable system that facilitates organizing server security-related information into a schema, comprising:
-
means for identifying a type of a server;
means for identifying a plurality of security category components based at least in part upon the type;
means for identifying a plurality of vulnerability components based at least in part upon the plurality of security category components;
means for identifying a plurality of threat/attack components based at least in part upon the plurality of vulnerability components;
means for identifying a plurality of countermeasure components based at least in part upon the plurality of threat/attack components; and
means for incorporating a subset of the plurality of security category components, the vulnerability components, the threat/attack components and the countermeasure components into a server security schema. - View Dependent Claims (19, 20)
-
Specification