Method and system for dynamically distributing updates in a network

• US 7,353,511 B1
• Filed: 11/04/2002
• Issued: 04/01/2008
• Est. Priority Date: 02/01/1999
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ziese, Kevin J.
• Primary Examiner(s): INGBERG, TODD D
• Application Number:
  US10/288,678
• Time in Patent Office: 1,975 Days
• Field of Search: 717168-178, 713/100
• US Class Current: 717/178
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99954 Version management

Abstract

A first version of a program operating at a network site is updated by automatically downloading from a remote site any update for the program in response to an automated event. A downloaded update is installed to generate a second version of the program. The second version of the program is operated at the network site in place of the first version.

Claims

1. Logic encoded in media for updating a first version of a program operating at a network site, the logic operable to:

in response to an automated event, automatically download from a remote site any update for the program;

automatically install a downloaded update to a computer readable media to generate a second version of the program;

automatically determine, after installation of the downloaded update, whether the second version of the program is operating correctly;

in response to correct operation of the second version, operate the second version of the program in place of the first version at the network site; and

in response to incorrect operation of the second version, automatically restore the first version of the program for operation at the network site.

2. The logic encoded in media of claim 1, further operable to automatically distribute the downloaded update to a disparate network site operating the first version of the program.

3. The logic encoded in media of claim 1, further operable to:

broadcast over a private network an update message;

receive, in response to the update message, a request for the downloaded update from one or more of a plurality of disparate network sites operating the first version of the program; and

automatically distribute the downloaded update to the disparate network sites requesting the downloaded update.

4. The logic encoded in media of claim 1, further operable to:

receive a recovery event;

automatically restore the first version of the program at the network site; and

broadcast a recovery message from the network site over a private network.

5. The logic encoded in media of claim 4, wherein the recovery event occurs in response to incorrect operation of the second version of the program.

6. The logic encoded in media of claim 1, wherein the automated event is a timed event.

7. The logic encoded in media of claim 6, further operable to age the first version of the program and wherein the timed event is the first version reaching a specified age.

8. The logic encoded in media of claim 1, wherein the program is an intrusion detection sensor including a set of intrusion detection signatures.

9. Logic encoded in media for updating a first version of a program operating at a network site, the logic operable to:

in response to an automated event, automatically download from a remote site any update for the program;

install a downloaded update to a computer readable media to generate a second version of the program;

operate the second version of the program in place of the first version at the network site; and

automatically distribute the downloaded update to a disparate network site operating the first version of the program.

10. The logic encoded in media of claim 9, further operable to:

broadcast over a private network an update message; and

receive, in response to the update message, a request for the downloaded update from the disparate network site.

11. The logic encoded in media of claim 9, further operable to:

receive a recovery event;

automatically restore the first version of the program at the network site; and

broadcast a recovery message from the network site over a private network.

12. The logic encoded in media of claim 9, wherein the automated event is a timed event.

13. The logic encoded in media of claim 12, further operable to age the first version of the program and wherein the timed event is the first version reaching a specified age.

14. The logic encoded in media of claim 9, wherein the program is an intrusion detection sensor including a set of intrusion detection signatures.

15. A network site associated with a private network, comprising:

a storage location storing a first set of intrusion detection signatures; and

a first version of an intrusion detection sensor operating with the first set of intrusion detection signatures, the first version of the intrusion detection sensor operable to;

in response to an automated event, automatically download from a remote site any update for the first set of intrusion detection signatures;

automatically install a downloaded update to a computer readable media to generate a second set of intrusion detection signatures and a second version of the intrusion detection sensor; and

operate the second version of the intrusion detection sensor at the network site.

16. The network site of claim 15, wherein the first version of the intrusion detection sensor is further operable to automatically distribute the downloaded update to a disparate network site operating the first version of the intrusion detection sensor.

17. The network site of claim 15, wherein the first version of the intrusion detection sensor is further operable to:

broadcast over a private network an update message;

receive, in response to the update message, a request for the downloaded update from one or more of a plurality of disparate network sites operating the first version of the intrusion detection sensor; and

automatically distribute the downloaded update to the disparate network sites requesting the downloaded update.

18. The network site of claim 15, wherein the first version of the intrusion detection sensor is further operable to:

receive a recovery event;

automatically restore the first version of the intrusion detection sensor at the network site; and

broadcast a recovery message from the network site over a private network.

19. The network site of claim 15, wherein the automated event is a timed event.

20. The network site of claim 19, wherein the first version of the intrusion detection sensor is further operable to age the first version of the program and wherein the timed event is the first version reaching a specified age.

21. A system for updating a first version of a program at a network site, comprising:

means for, in response to an automated event, automatically downloading from a remote site any update for the program;

means for automatically installing a downloaded update to a computer readable media to generate a second version of the program;

means for, after installation of the downloaded update, automatically determining whether the second version of the program is operating correctly;

means for, in response to correct operation of the second version, operating the second version of the program in place of the first version at the network site; and

means for, in response to incorrect operation of the second version, automatically restoring the first version of the program for operation at the network site.

22. The system of claim 21, further comprising means for automatically distributing the downloaded update to a disparate network site operating the first version of the program.

23. The system of claim 21, further comprising:

means for broadcasting over a private network an update message;

means for receiving, in response to the update message, a request for the downloaded update from one or more of a plurality of disparate network sites operating the first version of the program; and

means for automatically distributing the downloaded update to the disparate network sites requesting the downloaded update.

24. The system of claim 21, further comprising:

means for receiving a recovery event;

means for automatically restoring the first version of the program at the network site; and

means for broadcasting a recovery message from the network site over a private network.

25. The system of claim 21, wherein the automated event is a timed event.

26. The system of claim 25, further comprising means for aging the first version of the program and wherein the timed event is the first version reaching a specified age.

27. The system of claim 21, wherein the program is an intrusion detection sensor including a set of intrusion detection signatures.