System and method of monitoring and controlling application files
First Claim
1. A system, including one or more processors, for collecting network access data for use in updating a monitoring system which controls programs accessing a network, comprising:
- a workstation management module configured to detect a program on a workstation accessing a network, determine whether the program is in a network access database, send program data associated with the program to an application server module if the program is not in the network access database, and apply one or more policies that are associated with the program, wherein the network access database includes a protocol that is associated with the program; and
the application server module being configured to receive the program data from the workstation management module if the program was not in the network access database, determine whether the program is operating in a predetermined manner based at least in part on analyzing past network activity involving the same or relevant programs and text strings associated with the program, if the program is not operating in the predetermined manner, then send the program data to an application database factory, if the program is operating in the predetermined manner, then provide the one or more policies associated with the program to the workstation management module.
13 Assignments
0 Petitions
Accused Products
Abstract
A system and method for updating, monitoring, and controlling applications on a workstation. The workstation includes a workstation management module configured to detect the launch or request to access a network by an application. A workstation application server receives data associated with the application from the workstation. The application server module can determine one or more policies or categories to associate with the application by referencing an application inventory database. Once the application server module has the category or policy, it forwards a hash/policy table to the workstation management module. Upon receipt of the hash/policy table, the workstation management module applies the policy that is associated with the application to control network access by the application.
198 Citations
20 Claims
-
1. A system, including one or more processors, for collecting network access data for use in updating a monitoring system which controls programs accessing a network, comprising:
-
a workstation management module configured to detect a program on a workstation accessing a network, determine whether the program is in a network access database, send program data associated with the program to an application server module if the program is not in the network access database, and apply one or more policies that are associated with the program, wherein the network access database includes a protocol that is associated with the program; and the application server module being configured to receive the program data from the workstation management module if the program was not in the network access database, determine whether the program is operating in a predetermined manner based at least in part on analyzing past network activity involving the same or relevant programs and text strings associated with the program, if the program is not operating in the predetermined manner, then send the program data to an application database factory, if the program is operating in the predetermined manner, then provide the one or more policies associated with the program to the workstation management module. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14)
-
-
15. A system, including one or more processors, for collecting network access data for use in updating a monitoring system which controls a program on a computer from accessing a network based at least in part on information collected from another computer over the network, the system comprising:
-
a first workstation management module configured to detect a program on a first workstation accessing a network, determine whether the program is in a first network access database, send program data associated with the program to an application server module if the program is not in the first network access database, and apply one or more policies that are associated with the program; the application server module being configured to receive the program data from the first workstation management module if the program was not in the first network access database, determine whether the program is operating in a predetermined manner based at least in part on analyzing past network activity involving the same or relevant programs and text strings associated with the program, if the program is not operating in the predetermined manner, then send the program data to an application database factory, if the program is operating in the predetermined manner, then provide the one or more policies associated with the program to at least a second workstation; and a second workstation management module being configured to receive the one or more policies from the application server module and update a second network access database resident on the second workstation. - View Dependent Claims (16, 17, 18)
-
-
19. A system, including one or more processors, for collecting network access data for use in updating a monitoring system which controls programs accessing a network, comprising:
-
a workstation management module configured to detect a program on a workstation accessing a network, determine whether the program is in a network access database, send program data associated with the program to an application server module if the program is not in the network access database, and apply one or more policies that are associated with the program, wherein the network access database includes a protocol that is associated with the program; the application server module being configured to receive the program data from the workstation management module if the program was not in the network access database, analyze past network activity involving the same or relevant programs and text strings associated with the program to determine whether the program is operating in a predetermined manner and to associate one or more indicators with the program, if the program is not operating in the predetermined manner, then send the program data to an application database factory, if the program is operating in the predetermined manner, then provide the one or more policies associated with the program to the workstation management module. - View Dependent Claims (20)
-
Specification