Security assessment using service provider digital asset information

• US 20160239772A1
• Filed: 04/29/2016
• Published: 08/18/2016
• Est. Priority Date: 09/24/2010
• Status: Active Grant

• Current Assignee: BitSight Technologies, Inc.
• Original Assignee: BitSight Technologies, Inc.
• Inventors: Dahlberg, Daniel
• Granted Patent: US 9,830,569 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/23 Updating
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

Among other things, customer account data is received from a service provider. The customer account data is representative of relationships that exist at successive times between digital assets provided by the service provider and respective entities to whom the digital assets are provided by the service provider. The received data is used to update a database to represent mappings of digital assets to respective entities to whom the digital assets are provided at one of the successive times, changes in the mappings between successive times, or both.

Claims

1. A computer-implemented method comprising

receiving from a service provider customer account data representative of relationships that exist at successive times between digital assets provided by the service provider and respective entities to whom the digital assets are provided by the service provider, and

using the received data to update a database to represent mappings of digital assets to respective entities to whom the digital assets are provided at one of the successive times, changes in the mappings between successive times, or both.

2. The method of claim 1 in which the digital assets provided by the service provider comprise digital asset identifiers of digital assets provided by the service provider as of each of the successive times.

3. The method of claim 2 in which the digital asset identifiers comprise IP addresses or domain names or both.

4. The method of claim 1 in which the customer account data is expressed in a predetermined format and in which the method comprises preprocessing the account data in the predetermined format to generate data in a common format for use in the updating of the database.

5. The method of claim 1 in which the relationships comprise vendor-customer relationships between the service provider and the entities with respect to the digital assets.

6. The method of claim 1 in which a party other than the service provider or any of the entities receives the data and updates the database.

7. The method of claim 1 in which the service provider internally receives the data and updates the database.

8. The method of claim 1 in which the account data comprises identifiers of the entities.

9. The method of claim 1 in which the account data comprises information about the digital assets.

10. The method of claim 1 in which the account data comprises a dataset of a database of the service provider.

11. The method of claim 1 comprising preprocessing the account data.

12. The method of claim 11 in which the preprocessing comprises matching an entity identified in the account data with an entity identified in the database.

13. The method of claim 11 in which the preprocessing comprises distinguishing an entity for which the account data identifies a name from an entity for which the database identifies the same name, when the two entities are different entities.

14. The method of claim 1 comprising evaluating security risks associated with the entities based on the digital assets mapped to the respective entities.

15. The method of claim 1 comprising merging information from the account data of the service provider with account data of another source.

16. The method of claim 1 comprising

determining events based on changes in the mappings.

17. The method of claim 16 in which at least one of the events comprises creation of a new static assignment or allocation by the service provider.

18. The method of claim 16 in which at least one of the events comprises updating of an existing static assignment or allocation by the service provider.

19. The method of claim 16 in which at least one of the events comprises removal of a CIDRs or a set of CIDRs by the service provider.

20. The method of claim 16 in which at least one of the events comprises provisioning of or renewal of a DHCP lease for a customer.

21. The method of claim 16 in which at least one of the events comprises creation or removal of announcements by the service provider related to CIDRs were a set of CIDRs.

22. The method of claim 16 in which at least one of the events comprises creation, updating, or removal of IMSI information.

23. The method of claim 16 in which at least one of the events comprises creation, updating, or removal of email addresses.

24. The method of claim 16 in which at least one of the events comprises creation, updating, or termination of the customer in the account data.

25. The method of claim 1 in which the account data is received through an exposed API.

26. The method of claim 1 in which the account data is received at regular intervals as character delimited files.

27. The method of claim 1 in which the account data is received as a snapshot of an entire database maintained by the service provider.

28. The method of claim 27 in which the account data is received as deltas relative to the entire database snapshot.

29. A computer-implemented method comprising

maintaining customer account data representative of relationships that exist at successive times between digital assets provided by a service provider and respective entities to whom the digital assets are provided by the service provider, and

making the customer account data available through the Internet to another party for use in updating a database to represent mappings of digital assets to respective entities as of each of the successive times.

30. The method of claim 29 in which the digital assets provided by the service provider comprise digital asset identifiers of digital assets provided by the service provider as of each of the successive times.