HOSTED VULNERABILITY MANAGEMENT FOR WIRELESS DEVICES

• US 20100100930A1
• Filed: 10/07/2009
• Published: 04/22/2010
• Est. Priority Date: 11/06/2007
• Status: Abandoned Application

• Current Assignee: Airtight Networks Incorporated (Arista Networks, Inc.)
• Original Assignee: Airtight Networks Incorporated (Arista Networks, Inc.)
• Inventors: King, David C.
• Application Number:
  US12/574,701
• Publication Number:
  US 20100100930A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method, a multi-tenant security server apparatus and associated system for securing wireless communication of devices. The method includes transferring security policy configuration information from the security server to wireless devices. The method also includes ascertaining compliance of wireless activity of the wireless devices with the security policy configuration using client software modules installed on the wireless devices.

Claims

1. A method for securing wireless communication of devices using a multi-tenant security server, the method comprising:

providing a security server, the security server being hosted by a service provider entity, the security server being coupled to the Internet, the security server being adapted to provide analysis of wireless activity data associated with a plurality of sets of wireless devices of a plurality of customer entities, respectively;

creating a workspace for a first customer entity on the security server, the creating the workspace being responsive to a subscription request from the first customer entity;

receiving wireless security policy configuration information for a first set of wireless devices associated with the first customer entity at the security server within the workspace for the first customer entity;

providing for installing one or more client software modules on the first set of wireless devices, the one or more client software modules being adapted to monitor wireless communication activity of the first set of wireless devices;

receiving one or more connection requests at the security server over the Internet from the first set of wireless devices, subsequent to the installing of the one or more client software modules;

associating identities of the first set of wireless devices with the workspace for the first customer entity at the security server;

transferring the wireless security policy configuration information to the first set of wireless devices over the Internet;

ascertaining compliance of wireless communication activity of the first set of wireless devices with the wireless security policy configuration using the one or more client software modules installed on the first set of wireless devices; and

receiving at the security server over the Internet within the workspace for the first customer entity one or more notifications associated with the ascertaining compliance of the wireless communication activity of the first set of wireless devices with the wireless security policy configuration.

2. A multi-tenant server computer device adapted to provide security for wireless communication of devices, the server computer comprising:

a memory unit storing computer executable instructions;

a processor unit for executing the computer executable instructions; and

a communication interface for coupling the server computer device to a computer network;

wherein the computer executable instructions are adapted to perform the steps of;

creating a plurality of workspaces for a plurality of customer entities, respectively, within the memory unit, the creating the plurality of workspaces being responsive to a plurality of subscription requests from the plurality of customer entities, respectively;

receiving wireless security policy configuration information for a plurality of sets of wireless devices associated with the plurality of customer entities, respectively, within the plurality of workspaces for the plurality of customer entities, respectively;

providing for installing one or more client software modules on the plurality of sets of wireless devices, the one or more client software modules being adapted to monitor wireless communication activity of the plurality of sets of wireless devices;

receiving one or more connection requests through the communication interface from the plurality of sets of wireless devices, subsequent to the installing of the one or more client software modules;

associating identities of the plurality of sets of wireless devices with the plurality of workspaces for the plurality of customer entities, respectively;

transferring the wireless security policy configuration information to the plurality of sets of wireless devices through the communication interface; and

receiving through the communication interface within the plurality of workspaces for the plurality of customer entities, respectively, a plurality of notifications associated with ascertaining compliance of wireless communication activity of the plurality of sets of wireless devices, respectively, with the wireless security policy configuration.