ENTERPRISE SECURITY MANAGEMENT FOR NETWORK EQUIPMENT

• US 20090199298A1
• Filed: 06/26/2008
• Published: 08/06/2009
• Est. Priority Date: 06/26/2007
• Status: Abandoned Application

• Current Assignee: NetClarity, Inc. (Jacobs Solutions, Inc.)
• Original Assignee: NetClarity, Inc. (Jacobs Solutions, Inc.)
• Inventors: Miliefsky, Gary S.
• Application Number:
  US12/147,433
• Publication Number:
  US 20090199298A1
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The inventive device includes a dashboard or graphical user interface (GUI), a security access control (AUTH) and secure communications sub-system (SEC-COMM), network and asset discover and mapping system (NAADAMS), an asset management engine (AME), vulnerability assessment engine (CVE-DISCOVERY), vulnerability remediation engine (CVE-REMEDY), a reporting system (REPORTS), a subscription, updates and licensing system (SULS), a countermeasure communications system (COUNTERMEASURE-COMM), a logging system (LOGS), a database integration engine (DBIE), a scheduling and configuration engine (SCHED-CONFIG), a wireless and mobile devices/asset detection and management engine (WIRELESS-MOBILE), a notification engine (NOTIFY), a regulatory compliance reviewing and reporting system (REG-COMPLY), client-side (KVM-CLIENT) integration with KVM over IP or similar network management equipment, authentication-services (KVM-AUTH) integration with KVM over IP or similar network management equipment and server-side (KVM-SERVER) integration with KVM over IP or similar network management equipment.

Claims

1. A system comprising:

a vulnerability management console displayed on a device in a network, the vulnerability management console providing services to uncover known common vulnerabilities and exposures within the network, and the device including a hardware port for each of a keyboard, a video device, and a mouse; and

a KVM system for accessing the hardware ports of the device, the KVM system providing a TCP/IP interface for accessing the hardware ports from a remote location through the KVM system;

whereby a user can operate the vulnerability management console of the device from a remote network location.

2. A method comprising:

providing a vulnerability management console on a device in a network, the vulnerability management console providing services to uncover known common vulnerabilities and exposures within the network;

connecting a KVM system to the hardware ports of the device for a keyboard, a video device, and a mouse; and

accessing the KVM system from a remote location to locally operate the vulnerability management console on the device.

3. The method of claim 2 further comprising transmitting a reconfiguration instruction to the vulnerability management console through the KVM system.

4. The method of claim 3 wherein the reconfiguration instruction includes a script for execution by the vulnerabilities management console.

5. The method of claim 2 further comprising transmitting a patch to the device through the KVM system.