Network security page

• US 20080047007A1
• Filed: 08/18/2006
• Published: 02/21/2008
• Est. Priority Date: 08/18/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sunkammurali, Krishna, Watson, Eric B., Satkunanathan, Lingan
• Granted Patent: US 8,239,943 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Described is a technology by which a user interface page outputs security status information obtained from network-wide and/or network client security components. This allows for simultaneous evaluation of the state of various network-wide and client security components, such as antimalware state, anti-spam state, firewall state, client program update state, and state data from a remote security service. Network security page logic couples to network-wide security components and client security components to obtain security state data for each. A user interface associated with the network security page logic lists the security components and the current security status for each, such as via an icon that changes its appearance to reflect the current state. Interactive mechanisms for launching system-wide security tasks and/or context-sensitive security tasks related to a selected security component may be provided on the user interface page, as may an interactive mechanism for resolving a security-related issue.

Claims

1. At least one computer-readable media having computer-executable instructions, which when executed perform steps, comprising:

obtaining security status information from a plurality of security components, including at least two different components that each apply to a single network; and

consolidating the security status information into a visible representation such that the security status of at least two different components may be simultaneously evaluated.

2. The computer-readable media of claim 1 wherein obtaining the security status information from a plurality of security components includes obtaining email antimalware or email anti-spam state data, or both.

3. The computer-readable media of claim 1 wherein obtaining the security status information from a plurality of security components includes obtaining wireless local area network access point state data.

4. The computer-readable media of claim 1 wherein obtaining the security status information from a plurality of security components includes obtaining network firewall state data.

5. The computer-readable media of claim 1 wherein obtaining the security status information from a plurality of security components includes obtaining security status corresponding to client computing devices of the network.

6. The computer-readable media of claim 5 wherein obtaining the security status corresponding to client computing devices of the network includes obtaining client email security state data, obtaining client firewall security data, or obtaining network quarantine state data, or obtaining any combination of client email security state data, client firewall security data, or network quarantine state data.

7. The computer-readable media of claim 1 having further computer-executable instructions comprising, generating alerts based on one or more system-wide security states, or taking action based on changes in one or more system-wide security states, or both.

8. The computer-readable media of claim 5 wherein obtaining the security status corresponding to client computing devices of the network includes obtaining client program update state data, obtaining security signature update state or obtaining general security configuration and alerts on the client, or obtaining any combination thereof.

9. The computer-readable media of claim 1 wherein obtaining the security status information from a plurality of security components includes obtaining state data from a remote security service.

10. In a computing environment, a system comprising:

network security page logic, including means for coupling to network-wide security components and client security components to obtain security state data for each; and

a user interface associated with the network security page logic, the user interface configured to;

a) list at least some of the security components;

b) output a current security status for each listed security component; and

c) display current security state details for a selected security component.

11. The system of claim 10 wherein the user interface is further configured to display a representation of a system-wide security task such that interaction with the representation launches the task.

12. The system of claim 10 wherein the user interface is further configured to display a representation of a context-sensitive security task related to the selected security component, such that interaction with the representation launches the task.

13. The system of claim 10 wherein the security components that are listed include at least one component of a set, the set containing, a network firewall component, a wireless local area network access point, an email anti-malware component, a client anti-malware component, a server anti-malware component, a threat assessment component including for client or server security policy compliance or both client or server security policy compliance, and an automatic updates compliance component.

14. The system of claim 10 wherein the output of the current security status for each listed security component comprises at least one icon that changes its appearance based on the current security status.

15. The system of claim 10 wherein the user interface is further configured to display a representation of a mechanism for resolving a security-related issue, such that interaction with the representation resolves the security-related issue.

16. In a computing environment having a computer network, a method comprising:

providing a user interface that consolidates security state data of an information technology infrastructure into a single page; and

updating the user interface in response to a change in the security state data.

17. The method of claim 16 wherein providing the user interface includes listing security components and a current status for each security component.

18. The method of claim 16 wherein providing the user interface includes listing details or troubleshooting information, or both, for a selected security component.

19. The method of claim 16 wherein providing the user interface includes providing an interactive mechanism for launching security-related tasks, or providing a mechanism to adjust a system-wide security level, or both.

20. The method of claim 16 further comprising, collecting the security status provided for programmatic use or for use in another user interface of another program, or both.