System for scan organizing, managing and running enterprise-wide scans by selectively enabling and disabling scan objects created by agents

• US 9,258,387 B2
• Filed: 04/18/2014
• Issued: 02/09/2016
• Est. Priority Date: 06/30/2010
• Status: Active Grant

• Current Assignee: Raytheon Company (Rtx Corporation)
• Original Assignee: Raytheon Company (Rtx Corporation)
• Inventors: Turner, Joseph A.
• Primary Examiner(s): Murray, Daniel C
• Application Number:
  US14/256,048
• Publication Number:
  US 20140229522A1
• Time in Patent Office: 662 Days
• Field of Search: 709/202, 709/223, 707/713, 707/718, 707/721, 707/758, 707/779, 707/755, 715/764, 726/22
• US Class Current: 1/1
• CPC Class Codes: G06F 16/903 Querying for retrieval from the web G06F16/953
• CPC Class Codes: G06F 16/90328 using search space presentation or visualization, e.g. category or range presentation and selection
• CPC Class Codes: G06F 16/9035 Filtering based on additional data, e.g. user or group profiles
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 16/9538 Presentation of query results
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: H04L 67/01 Protocols

Abstract

Disclosed is a system configured to create, organize, and monitor computer searches across a large number of networked computers. The system allows individual searches to be created and tailored depending upon specific objectives. Once established, the system permits the search parameters to be subsequently edited as needed. A graphical user interface (GUI) allows users to view established searches and to monitor searches once activated. Search results can also be tabulated by way of the GUI.

Claims

1. A system for managing multiple scans across a computer network, the system comprising:

a central computer configured to organize and manage a plurality of different scans across a number of different computer workstations in a computer network;

a number of client computers, the client computers communicating with the central computer via the computer network, each of the client computers including one or more agents configured to create a series of scan objects that are selectively enabled and disabled to perform a scan of the client computer, each scan object containing a scan name, description, and a type of scan to be performed, and each scan object assigned a scan setting including file paths to be searched, scanning intervals and start times;

the client computers including an agent server protocol that formats search details specified by the scan object prior to activating the scan object, the agent configured to determine at least one enabled scan object among the series of scan objects and the prior formatted searched details, and create search parameters based upon the at least one scan object in response to enabling the at least one scan object, the search parameters being formatted by way of the agent server protocol, and sending formatted search parameters to one or more agents via the computer network, whereby the agents carry out scans in accordance with the formatted search parameters;

a database associated with the central computer, the database containing a plurality of different scan objects and the scan setting assigned to each scan object, each of the scan objects containing details regarding a type of scan to be performed; and

a graphical user interface (GUI) configured to display a list of each scan object individually and communication commands to the central computer, whereby the GUI enables users to initiate a scan by an agent in accordance with the details specified by a corresponding scan object, the GUI configured to display scan activity by way of the GUI, the scan activity including a number of agents currently in the process of scanning, a number of agents that have successfully completed a scan, and a number of events recorded,

wherein an application adapter is delivered to the agents prior to a search being initiated, and wherein the central computer formats the application adapter by way of the agent server protocol, the formatted application adapters interfacing with the agents and enabling the scans specified by the scan objects and sending the formatted application adapters to one or more agents via the computer network.

2. The system as described in claim 1 further comprising a scan object editor configured to permit a user to modify a previously created scan object.