System and method for organizing, managing and running enterprise-wide scans

• US 8,706,854 B2
• Filed: 06/30/2010
• Issued: 04/22/2014
• Est. Priority Date: 06/30/2010
• Status: Active Grant

• Current Assignee: Rayteon Company, Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Turner, Joseph A.
• Primary Examiner(s): Dollinger, Tonia L
• Assistant Examiner(s): Murray, Daniel C
• Application Number:
  US12/827,918
• Publication Number:
  US 20120005581A1
• Time in Patent Office: 1,392 Days
• Field of Search: 709/223, 709/202, 707/3, 707/55, 707/755, 715/764, 726/22
• US Class Current: 709/223
• CPC Class Codes: G06F 16/903 Querying for retrieval from the web G06F16/953
• CPC Class Codes: G06F 16/90328 using search space presentation or visualization, e.g. category or range presentation and selection
• CPC Class Codes: G06F 16/9035 Filtering based on additional data, e.g. user or group profiles
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 16/9538 Presentation of query results
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: H04L 67/01 Protocols

Abstract

Disclosed is a system and method for creating, organizing, and monitoring computer searches across a large number of networked computers. The system allows individual searches to be created and tailored depending upon specific objectives. Once established, the system permits the search parameters to be subsequently edited as needed. A graphical user interface (GUI) allows users to view established searches and to monitor searches once activated. Search results can also be tabulated by way of the GUI.

Claims

1. A method for permitting a user to manage, monitor or run scans across a number of different computer workstations in a computer network, the scans being carried out by agents resident on the computer workstations, the method employing a graphical user interface (GUI) and comprising steps of:

creating a series of scan objects that are selectively enabled and disabled, each scan object containing a scan name, description, and type of scan to be performed;

establishing scan settings for each scan object, the scan settings including file paths to be searched, scanning intervals and start times;

storing each scan object and associated settings in a database;

listing each scan object individually in the database accessible by way of the GUI, permitting the user to modify and activate the scan objects by way of a scan object editor;

creating application adapters based upon the scan objects;

formatting the application adapters by way of an agent server protocol, the formatted application adapters interfacing with the agents and enabling the scans specified by the scan objects and sending the formatted application adapters to one or more agents via the computer network;

determining at least one enabled scan object among the series of scan objects, and creating search parameters based upon the at least one scan object in response to enabling the at least one scan object, the search parameters being formatted by way of the agent server protocol, and sending the formatted search parameters to one or more agents via the computer network, whereby the agents carry out scans in accordance with the search parameters; and

displaying scan activity by way of the GUI, the scan activity including a number of agents currently in the process of scanning, a number of agents that have successfully completed a scan, and a number of events recorded.

2. A method for managing scans across a computer network, the scans being run by agents on client computers associated with the network, the method comprising steps of:

creating a series of scan objects that are selectively enabled and disabled, each scan object containing a type of scan to be performed;

establishing settings for each scan object, the settings specifying one or more terms to be scanned for;

storing each scan object and associated settings in a database;

listing each scan object individually in the database by way of a user interface;

determining at least one enabled scan object among the series of scan objects, and creating search parameters based upon the at least one scan object in response to enabling the at least one scan object, and sending the search parameters to one or more agents via the computer network, whereby the agents carry out scans in accordance with the search parameters.

3. The method as described in claim 2 further comprising a step of establishing pre-defined settings for each of the scan objects.

4. The method as described in claim 2 comprising a further step of displaying scan activity by way of the user interface, the scan activity including a number of agents currently in the process of scanning, a number of agents that have successfully completed a scan, and a number of events recorded.

5. The method as described in claim 2 comprising a further step of formatting the search parameters prior to distributing the search parameters over the network.

6. The method as described in claim 2 comprising further steps of:

creating application adapters based upon the scan objects, the application adapters interfacing with the agents; and

sending the application adapters to one or more agents via the computer network.