Method and apparatus for distributing network security advisory information

• US 8,176,078 B1
• Filed: 12/21/2005
• Issued: 05/08/2012
• Est. Priority Date: 12/21/2005
• Status: Expired due to Fees

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Singer, Michael, Roden, Keith, Roderick, Stephen
• Primary Examiner(s): To, Baoquoc
• Application Number:
  US11/314,598
• Time in Patent Office: 2,330 Days
• Field of Search: 707/10
• US Class Current: 707/783
• CPC Class Codes: G06Q 10/00 Administration; Management

Abstract

In one embodiment, the present invention is a method and apparatus for distributing network security advisory information. In one embodiment, each user creates a profile describing his or her preferences with regard to the receipt of security advisory information (e.g., types of security advisory information he or she wishes to receive, the channels over which he or she wishes to receive the security advisory information). Incoming security advisory information is then distributed in accordance with the user profiles.

Claims

1. A method for distributing security advisory information in a network, the method comprising:

receiving a plurality of user profiles at a threat management system, wherein the threat management system monitors for security threats in a computing network, each of the plurality of user profiles describing preferences of an associated user with regard to a receipt of third-party security advisory information, wherein the preferences comprise a channel over which the associated user wishes to receive the third-party security advisory information, wherein the channel comprises an internal web site, wherein the third-party security advisory information comprises an alert relating to a vulnerability of the computing network and information relating to how to repair a detected vulnerability in the computing network; and

distributing via the threat management system the third-party security advisory information in accordance with the plurality of user profiles.

2. The method of claim 1, wherein the preferences further comprise a type of third-party security advisory information that the associated user wishes to receive.

3. The method of claim 2, wherein the type of third-party security advisory information is specified by an urgency level related to the third-party security advisory information.

4. The method of claim 1, wherein the plurality of user profiles is received via a hypertext markup language interface.

5. The method of claim 1, wherein the distributing comprises:

receiving the third-party security advisory information;

identifying identified users from the plurality of users who are interested in receiving the third-party security advisory information; and

forwarding the third-party security advisory information to the identified users.

6. The method of claim 5, wherein the third-party security advisory information is received from a third party.

7. The method of claim 1, wherein the preferences further comprise a frequency with which the associated user wishes to receive the third-party security advisory information.

8. A computer readable medium containing an executable program for distributing security advisory information in a network, where the program performs:

receiving a plurality of user profiles at a threat management system, wherein the threat management system monitors for security threats in a computing network, each of the plurality of user profiles describing preferences of an associated user with regard to a receipt of third-party security advisory information, wherein the preferences comprise a channel over which the associated user wishes to receive the third-party security advisory information, wherein the channel comprises an internal web site, wherein the third-party security advisory information comprises an alert relating to a vulnerability of the computing network and information relating to how to repair a detected vulnerability in the computing network; and

distributing via the threat management system the third-party security advisory information in accordance with the plurality of user profiles.

9. The computer readable medium of claim 8, wherein the preferences further comprise a type of third-party security advisory information that the associated user wishes to receive.

10. The computer readable medium of claim 9, wherein the type of third-party security advisory information is specified by an urgency level related to the third-party security advisory information.

11. The computer readable medium of claim 8, wherein the plurality of user profiles is received via a hypertext markup language interface.

12. The computer readable medium of claim 8, wherein the distributing comprises:

receiving the third-party security advisory information;

identifying identified users from the plurality of users who are interested in receiving the third-party security advisory information; and

forwarding the third-party security advisory information to the identified users.

13. The computer readable medium of claim 12, wherein the third-party security advisory information is received from a third party.

14. The computer readable medium of claim 8, wherein the preferences further comprise a frequency with which the associated user wishes to receive the third-party security advisory information.

15. An apparatus for distributing security advisory information in a network, the apparatus comprising:

a processor; and

a computer-readable medium in communication with the processor, wherein the computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by the processor, cause the processor to perform a method, comprising;

receiving a plurality of user profiles, each user profile describing preferences of an associated user with regard to a receipt of third-party security advisory information, wherein the preferences comprise a channel over which the associated user wishes to receive the third-party security advisory information, wherein the channel comprises an internal web site, wherein the third-party security advisory information comprises an alert relating to a vulnerability of a computing network, monitored by a threat management system for security threats in the computing network and information relating to how to repair a detected vulnerability in the computing network; and

distributing the third-party security advisory information in accordance with the plurality of user profiles.

16. The apparatus of claim 15, wherein the preferences further comprise a type of third-party security advisory information that the associated user wishes to receive.

17. The apparatus of claim 16, wherein the type of third-party security advisory information is specified by an urgency level related to the third-party security advisory information.

18. The apparatus of claim 15, wherein the plurality of user profiles is received via a hypertext markup language interface.

19. The apparatus of claim 15, further comprising:

receiving the third-party security advisory information;

identifying identified users from the plurality of users who are interested in receiving the third-party security advisory information; and

forwarding the third-party security advisory information to the identified users.

20. The apparatus of claim 15, wherein the preferences further comprise a frequency with which the associated user wishes to receive the third-party security advisory information.