Testing a computer system

• US 6,766,458 B1
• Filed: 10/03/2000
• Issued: 07/20/2004
• Est. Priority Date: 10/03/2000
• Status: Expired due to Term

• Current Assignee: McAfee, LLC
• Original Assignee: Networks Associates Technology, Inc. (McAfee, LLC)
• Inventors: Bolin, Christopher Scott, Emm, David, Harris, Mark
• Primary Examiner(s): MOISE, EMMANUEL LIONEL
• Application Number:
  US09/678,690
• Time in Patent Office: 1,386 Days
• Field of Search: 713/200, 713/188, 713/201, 709/206, 714/26, 714/38
• US Class Current: 726/6
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system

Abstract

A computer program for checking user configurable security settings operates as either an on-demand application or a memory resident application. The security checking program may enforce the recommended settings or may generate a report to the user as to where the recommended settings are not in place.

Claims

1. A method of testing a computer, said method comprising executing a computer program to perform the steps of:

detecting a plurality of user configurable security settings of said computer;

comparing said user configurable security settings with respective recommended security settings; and

initiating action to alter any user configurable security settings detected as differing from respective recommended security settings;

wherein said user configurable security settings include at least six (6) of the following;

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed;

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically run upon opening said computer file;

an application program setting indicating that whether or not a macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available for sharing via said network without any user authentication;

a setting indicating whether or not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

2. A method as claimed in claim 1, wherein said step of initiating comprises generating a recommendation user report specifying recommended changes to be made to said security settings.

3. A method as claimed in claim 2, wherein said recommendation user report includes at least one user input portion via which a user may trigger a user configurable security setting to be altered to a recommended security setting.

4. A method as claimed in claim 2, wherein said computer program is an on-demand computer program run in response to a user input run command.

5. A method as claimed in claim 1, wherein said steps of initiating comprises automatically changing any user configurable security settings detected as differing from respective recommended security settings without user input.

6. A method as claimed in claim 1, wherein said user configurable security settings include each of the following:

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed;

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically run upon opening said computer file;

an application program setting indicating that whether or not a macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available for sharing via said network without any user authentication;

a setting indicating whether or not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

7. A method as claimed in claim 5, wherein said computer program is a memory resident computer program continuously run as a background task.

8. Apparatus for testing a computer, said apparatus comprising:

detection logic operable to detect a plurality of user configurable security settings of said computer;

comparison logic operable to compare said user configurable security settings with respective recommended security settings; and

initiation logic operable to initiate action to alter any user configurable security settings detected as differing from respective recommended security settings;

wherein said user configurable security settings include at least six (6) of the following;

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed;

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically run upon opening said computer file;

an application program setting indicating that whether or not a macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available for sharing via said network without any user authentication;

a setting indicating whether or not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

9. Apparatus as claimed in claim 8, wherein said initiation logic is operable to generate a recommendation user report specifying recommended changes to be made to said security settings.

10. Apparatus as claimed in claim 9, wherein said recommendation user report includes at least one user input portion via which a user may trigger a user configurable security setting to be altered to a recommended security setting.

11. Apparatus as claimed in claim 9, wherein said detection logic, said comparison logic and said initiation logic are provides using a computer program that is an on-demand computer program run in response to a user input run command.

12. Apparatus as claimed in claim 8, wherein said initiation logic is operable to automatically change any user configurable security settings detected as differing from respective recommended security settings without user input.

13. Apparatus as claimed in claim 8, wherein said user configurable security settings include each of the following:

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed;

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically run upon opening said computer file;

an application program setting indicating that whether or not macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available for sharing via said network without any user authentication;

a setting indicating whether or not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

14. Apparatus as claimed in claim 12, wherein said detection logic, said comparison logic and said initiation logic are provides using a computer program that is a memory resident computer program continuously run as a background task.

15. A computer program product carrying a computer program for controlling a computer to testing a computer, said computer program comprising:

detection code operable to detect a plurality of user configurable security settings of said computer;

comparison code operable to compare said user configurable security settings with respective recommended security settings; and

initiation code operable to initiate action to alter any user configurable security settings detected as differing from respective recommended security settings;

wherein said user configurable security settings include at least six (6) of the following;

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed;

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically run upon opening said computer file;

an application program setting indicating that whether or not a macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available for sharing via said network without any user authentication;

a setting indicating whether or not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

16. A computer program product as claimed in claim 15, wherein said initiation code is operable to generate a recommendation user report specifying recommended changes to be made to said security settings.

17. A computer program product as claimed in claim 16, wherein said recommendation user report includes at least one user input portion via which a user may trigger a user configurable security setting to be altered to a recommended security setting.

18. A computer program product as claimed in claim 16, wherein said computer program is an on-demand computer program run in response to a user input run command.

19. A computer program product as claimed in claim 15, wherein said initiation code is operable to automatically charge any user configurable security settings detected as differing from respective recommended security settings without user input.

20. A computer program product as claimed in claim 15, wherein said user configurable security settings include each of the following:

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed,

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically ran upon opening said computer file;

an application program setting indicating that whether or not macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available or sharing via said network without any user authentication;

a setting indicating whether on not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

21. A computer program product as claimed in claim 19, wherein said computer program is a memory resident computer program continuously run as a background task.

22. A method of protecting a computer system against security problems, said method of including the steps of:

downloading data identifying recommended user configurable security settings from a remote source; and

updating a set of recommended use configurable security held at said computer system;

wherein said recommended user configurable security setting include each of the following;

an e-mail program setting which automatically runs scripts embedded within e-mails when said e-mails are previewed;

an internet browser version identifier indicating whether or not predetermined security patches are applied;

an internet browser setting indicating selection of a group of parameters associated with operation of said internet browser that corresponded to at least a predetermined level of security;

an internet browser setting indicating that a user is prompted as to whether or not files downloaded via an internet link should be saved;

an application program setting indicating that whether or not any macro associated with a computer file manipulated by said application program is automatically run upon opening said computer file;

an application program setting indicating that whether or not macro security features associated with said application program are activated;

a file setting indicating whether or not a template file for computer files created by an application program is set as a read only file;

a setting indicating whether or not script programs with files manipulated by said computer should be executed;

a setting indicating that a file local to said computer is available for sharing via a network authority without any user authentication;

a setting indicating that a file upon a network accessible to said computer is available for sharing via said network without any user authentication;

a setting indicating whether or not file type extension are hidden when view computer file names using said computer; and

a setting indicating that said computer should attempted to boot from removable disk prior to attempting to boot from fixed disk.

23. A method as claimed in claim 22, wherein a graphical user interface is provided including a simultaneous listing of each of the configurable security settings, each with an associated check box for changing the configurable security settings.