Managing open shares in an enterprise computing environment

• US 9,736,219 B2
• Filed: 06/26/2015
• Issued: 08/15/2017
• Est. Priority Date: 06/26/2015
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Kansagra, Chirag, O'Callaghan, William, Shah, Minesh, Modi, Ketankumar, Chanbaig, Mubarak, Pandey, Ritesh, Chandrasekaran, Sriram
• Primary Examiner(s): Kim, Hee Soo
• Application Number:
  US14/751,641
• Publication Number:
  US 20160381117A1
• Time in Patent Office: 781 Days
• Field of Search: 709217
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Methods, systems, and computer-readable media for managing open shares in an enterprise computing environment are presented. In some embodiments, a computer system may receive a request to scan one or more servers for open shares. Then, the computer system may validate one or more input files associated with the request and verify access to the one or more servers. Next, the computer system may scan the one or more servers to create a runtime share list file identifying one or more open shares. Subsequently, the computer system may identify at least one open share to be remediated and may apply one or more remediation actions to the at least one open share. Thereafter, the computer system may update an output file to include remediation information identifying the one or more remediation actions applied to the at least one open share and may send the output file.

Claims

1. A system, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the system to;

receive, via the communication interface, and from an administrative computing device associated with an enterprise organization, a request to scan one or more servers associated with the enterprise organization for open shares;

based on receiving the request to scan the one or more servers associated with the enterprise organization for open shares, validate one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares;

based on validating the one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares, verify access to the one or more servers associated with the enterprise organization to be scanned for open shares;

based on verifying access to the one or more servers associated with the enterprise organization to be scanned for open shares, scan the one or more servers associated with the enterprise organization to create a runtime share list file identifying one or more open shares on the one or more servers associated with the enterprise organization;

based on scanning the one or more servers associated with the enterprise organization to create the runtime share list file identifying one or more open shares on the one or more servers associated with the enterprise organization, identify at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to be remediated;

based on identifying the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to be remediated, apply one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization;

based on applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, update an output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization; and

based on updating the output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, send, via the communication interface, to the administrative computing device associated with the enterprise organization, the output file.

2. The system of claim 1, wherein the administrative computing device is configured to be used by an administrative user of the enterprise organization.

3. The system of claim 2, wherein the administrative user of the enterprise organization is an information security administrator of a financial institution.

4. The system of claim 1, wherein the one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares include a server list file identifying the one or more servers associated with the enterprise organization to be scanned for open shares.

5. The system of claim 4, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the system to:

prior to receiving the request to scan the one or more servers associated with the enterprise organization for open shares, receive, via the communication interface, and from the administrative computing device associated with the enterprise organization, the server list file identifying the one or more servers associated with the enterprise organization to be scanned for open shares.

6. The system of claim 1, wherein the one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares include an exception share list file identifying one or more whitelisted open shares on at least one server of the one or more servers associated with the enterprise organization.

7. The system of claim 6, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the system to:

prior to receiving the request to scan the one or more servers associated with the enterprise organization for open shares, receive, via the communication interface, and from the administrative computing device associated with the enterprise organization, the exception share list file identifying the one or more whitelisted open shares on the at least one server of the one or more servers associated with the enterprise organization.

8. The system of claim 1, wherein verifying access to the one or more servers associated with the enterprise organization to be scanned for open shares comprises establishing one or more network connections to the one or more servers associated with the enterprise organization to be scanned for open shares.

9. The system of claim 1, wherein verifying access to the one or more servers associated with the enterprise organization to be scanned for open shares comprises verifying that one or more access privileges are sufficient to access one or more user accounts associated with the one or more servers associated with the enterprise organization to be scanned for open shares.

10. The system of claim 1, wherein applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization comprises deleting a first open share of the one or more open shares on the one or more servers associated with the enterprise organization to remove access to the first open share of the one or more open shares on the one or more servers associated with the enterprise organization.

11. The system of claim 1, wherein applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization comprises modifying a second open share of the one or more open shares on the one or more servers associated with the enterprise organization to remove access to the second open share of the one or more open shares on the one or more servers associated with the enterprise organization for a first group of enterprise users and preserve access to the second open share of the one or more open shares on the one or more servers associated with the enterprise organization for a second group of enterprise users different from the first group of enterprise users.

12. The system of claim 1, wherein updating the output file comprises updating the output file to include historical open share information identifying one or more preexisting permissions of the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to which the one or more remediation actions were applied.

13. The system of claim 1, wherein updating the output file comprises updating the output file to include error information identifying one or more server clusters for manual processing.

14. The system of claim 1, wherein updating the output file comprises updating the output file to include error information identifying one or more servers to which one or more network connections were not established.

15. The system of claim 1, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the system to:

based on updating the output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, publish, via the communication interface, to a file sharing platform associated with the enterprise organization, the output file.

16. A method, comprising:

at a computing platform comprising at least one processor, memory, and a communication interface;

receiving, by the at least one processor, via the communication interface, and from an administrative computing device associated with an enterprise organization, a request to scan one or more servers associated with the enterprise organization for open shares;

based on receiving the request to scan the one or more servers associated with the enterprise organization for open shares, validating, by the at least one processor, one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares;

based on validating the one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares, verifying, by the at least one processor, access to the one or more servers associated with the enterprise organization to be scanned for open shares;

based on verifying access to the one or more servers associated with the enterprise organization to be scanned for open shares, scanning, by the at least one processor, the one or more servers associated with the enterprise organization to create a runtime share list file identifying one or more open shares on the one or more servers associated with the enterprise organization;

based on scanning the one or more servers associated with the enterprise organization to create the runtime share list file identifying one or more open shares on the one or more servers associated with the enterprise organization, identifying, by the at least one processor, at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to be remediated;

based on identifying the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to be remediated, applying, by the at least one processor, one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization;

based on applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, updating, by the at least one processor, an output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization; and

based on updating the output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, sending, by the at least one processor, via the communication interface, to the administrative computing device associated with the enterprise organization, the output file.

17. The method of claim 16, wherein applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization comprises deleting a first open share of the one or more open shares on the one or more servers associated with the enterprise organization to remove access to the first open share of the one or more open shares on the one or more servers associated with the enterprise organization.

18. The method of claim 16, wherein applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization comprises modifying a second open share of the one or more open shares on the one or more servers associated with the enterprise organization to remove access to the second open share of the one or more open shares on the one or more servers associated with the enterprise organization for a first group of enterprise users and preserve access to the second open share of the one or more open shares on the one or more servers associated with the enterprise organization for a second group of enterprise users different from the first group of enterprise users.

19. The method of claim 16, wherein updating the output file comprises updating the output file to include historical open share information identifying one or more preexisting permissions of the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to which the one or more remediation actions were applied.

20. One or more non-transitory computer-readable media storing instructions that, when executed by a computer system comprising at least one processor, memory, and a communication interface, cause the computer system to:

receive, via the communication interface, and from an administrative computing device associated with an enterprise organization, a request to scan one or more servers associated with the enterprise organization for open shares;

based on receiving the request to scan the one or more servers associated with the enterprise organization for open shares, validate one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares;

based on validating the one or more input files associated with the request to scan the one or more servers associated with the enterprise organization for open shares, verify access to the one or more servers associated with the enterprise organization to be scanned for open shares;

based on verifying access to the one or more servers associated with the enterprise organization to be scanned for open shares, scan the one or more servers associated with the enterprise organization to create a runtime share list file identifying one or more open shares on the one or more servers associated with the enterprise organization;

based on scanning the one or more servers associated with the enterprise organization to create the runtime share list file identifying one or more open shares on the one or more servers associated with the enterprise organization, identify at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to be remediated;

based on identifying the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization to be remediated, apply one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization;

based on applying the one or more remediation actions to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, update an output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization; and

based on updating the output file to include remediation information identifying the one or more remediation actions applied to the at least one open share of the one or more open shares on the one or more servers associated with the enterprise organization, send, via the communication interface, to the administrative computing device associated with the enterprise organization, the output file.