SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR ENABLING COMMUNICATION BETWEEN SECURITY SYSTEMS

• US 20120167166A1
• Filed: 02/27/2012
• Published: 06/28/2012
• Est. Priority Date: 04/21/2009
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Muttik, Igor, Hearnden, Steve O., Spurlock, Joel Robert
• Granted Patent: US 8,572,732 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system, method, and computer program product are provided for enabling communication between security systems. In use, a first communication protocol of a first security system and a second communication protocol of a second security system are identified, where the first communication protocol and the second communication protocol are different such that the first security system and the second security system are incapable of communicating therebetween. Further, the first security system is updated with a first security definition and/or the second security system is updated with a second security definition for enabling communication between the first security system and the second security system.

Claims

1-20. -20. (canceled)

21. A computer program product embodied on a non-transitory computer readable medium, comprising computer code for:

identifying that a first security system is not communicating with a second security system; and

updating the first security system with a security definition for enabling a communication between the first security system and the second security system, wherein the security definition comprises a protocol for transmitting data between the first security system and the second security system.

22. The computer program product of claim 21, wherein the protocol defines a medium of the communication, a structure for the communication, and a response for the communication.

23. The computer program product of claim 22, wherein the medium is a file.

24. The computer program product of claim 21, wherein the security definition further comprises a port to be used for transmitting data to the second security system.

25. The computer program product of claim 21, wherein the security definition comprises logic for producing and consuming a communication.

26. The computer program product of claim 21, wherein the protocol is previously unrecognized by either the first security system or the second security system.

27. The computer program product of claim 21, wherein the first security system is only operative after boot-up of a device and the second security system is only operable during boot-up of the device.

28. A method, comprising:

identifying, by a computer, that a first security system is not communicating with a second security system; and

updating the first security system with a security definition for enabling a communication between the first security system and the second security system, wherein the security definition comprises a protocol for transmitting data between the first security system and the second security system.

29. The method of claim 28, wherein the protocol defines a medium of the communication, a structure for the communication, and a response for the communication.

30. The method of claim 29, wherein the medium is a file.

31. The method of claim 28, wherein the security definition further comprises a port to be used for transmitting data to the second security system.

32. The method of claim 28, wherein the security definition comprises logic for producing and consuming a communication.

33. The method of claim 28, wherein the protocol is previously unrecognized by either the first security system or the second security system.

34. The method of claim 28, wherein the first security system is only operative after boot-up of a device and the second security system is only operable during boot-up of the device.

35. A system including a processor coupled to memory via a bus, comprising:

a first security sub-system with a first communication protocol;

a second security sub-system with a second communication protocol, the second communication protocol different from the first communication protocol such that the first security sub-system and the second security sub-system are not communicating therebetween, wherein the system is operable to update the first security sub-system with a security definition for enabling a communication between the first sub-system system and the second security subsystem, the wherein the security definition comprises a protocol for transmitting data between the first security system and the second security system.

36. The system of claim 35, wherein the protocol defines a medium of the communication, a structure for the communication, and a response for the communication.

37. The system of claim 36, wherein the medium is a file.

38. The system of claim 35, wherein the security definition further comprises a port to be used for transmitting data to the second security system.

39. The system of claim 35, wherein the security definition comprises logic for producing and consuming a communication.

40. The system of claim 35, wherein the protocol is previously unrecognized by either the first security system or the second security system.