Methods, systems and computer program products for providing status information to a device attached to an information infrastructure

• US 7,467,201 B2
• Filed: 08/22/2003
• Issued: 12/16/2008
• Est. Priority Date: 08/22/2003
• Status: Expired due to Fees

• Current Assignee: Trend Micro Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Lingafelt, Steven, Marko, Gerald
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): SIDDIQI, MOHAMMAD A
• Application Number:
  US10/647,269
• Publication Number:
  US 20050044212A1
• Time in Patent Office: 1,943 Days
• Field of Search: 709223-225, 709/229, 713/1, 713/100, 713/150, 726/6, 726/22, 726/25, 726/34
• US Class Current: 709/224
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A method for providing status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device is disclosed. The device monitoring application utilizes signature data to monitor data associated with a device and selectively provide messages based on a correspondence between signature data and data associated with the device. A message signature is incorporated within the signature data. The data associated with the device is monitored by utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data. A status message is provided by utilizing the device monitoring application if the presence of the message signature is detected in the monitored data. The signature data includes computer virus signatures and the message signature is not related to a computer virus.

Claims

1. A method for providing status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device, wherein the device monitoring application utilizes signature data to monitor data associated with the device and selectively provides messages based on a correspondence between signature data and data associated with the device, said method comprising:

incorporating a message signature in the signature data;

monitoring data associated with the device utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data; and

providing a status message utilizing the device monitoring application if the presence of the message signature is detected in the monitored data, wherein the signature data includes computer virus signatures and the message signature is not related to a computer virus.

2. The method of claim 1, further comprising identifying an internet protocol (IP) address for one or more devices that are not registered with the information technology infrastructure.

3. The method of claim 2, further comprising sending the message signature to the identified IP address.

4. The method of claim 1, wherein the device monitoring application comprises an antivirus application.

5. The method of claim 4, wherein the message signature comprises a non-virus communication.

6. The method of claim 1, wherein said providing a status message includes providing a request to register the device in the information technology infrastructure.

7. The method of claim 1, wherein providing a status message includes providing instructions to register the device in the information technology infrastructure.

8. The method of claim 1, wherein providing a status message includes providing an emergency message.

9. The method of claim 1, wherein the device monitoring application comprises an intrusion detection application.

10. The method of claim 1, wherein the device monitoring application comprises a firewall application.

11. The method of claim 1, wherein said monitoring data associated with the device includes monitoring incoming data received by the device.

12. A computer readable memory having a computer program product for providing status information to a device attached to an information technology infrastructure utilizing a device monitoring application resident at the device, wherein the device monitoring application utilizing signature data to monitor data associated with the device and selectively provides messages based on a correspondence between signature data and data associated with the device, the computer readable memory comprising:

computer program code that is configured to incorporate a message signature in the signature data;

computer program code that is configured to monitor data associated with the device utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data; and

computer program code that is configured to provide a status message utilizing the device monitoring application if the presence of the message signature is detected in the monitored data, wherein the signature data includes computer virus signatures and the message signature is not related to a computer virus.

13. The computer readable memory of claim 12, further comprising computer program code that is configured to identify an internet protocol (IP) address for one or more devices that are not registered with the information technology infrastructure.

14. The computer readable memory program product of claim 13, further comprising computer program code that is configured to send the message signature to the identified IP address.

15. The computer readable memory of claim 12, wherein the device data monitoring application comprises an antivirus application.

16. The computer readable memory of claim 15, wherein the message signature comprises a non-virus communication.

17. A system for providing status information to a device attached to an information technology infrastructure utilizes a device data monitoring application resident at the device, wherein the device monitoring application utilizing signature data to monitor data associated with the device and selectively provides messages based on a correspondence between signature data and data associated with the device, the system comprising:

means for incorporating a message signature in the signature data;

means for monitoring data associated with the device utilizing the device monitoring application so as to detect a presence of the message signature in the monitored data; and

means for providing a status message utilizing the device monitoring application if the presence of the message signature is detected in the monitored data, wherein the signature data includes computer virus signatures and the message signature is not related to a computer virus.

18. The system of claim 17, further comprising means for identifying an internet protocol (IP) address for one or more devices that are not registered with the information technology infrastructure.

19. The system of claim 18, further comprising means for sending the message signature to the identified IP address.

20. The system of claim 17, wherein the device monitoring application comprises an antivirus application.

21. The system of claim 20, wherein the message signature comprises a non-virus communication.