Network policy management and effectiveness system

• US 8,381,305 B2
• Filed: 10/27/2010
• Issued: 02/19/2013
• Est. Priority Date: 06/25/1998
• Status: Expired due to Fees

• Current Assignee: Longhorn HD LLC (Alpha Alpha Intellectual Partners LLC)
• Original Assignee: Yaszistra Fund III LLC (Intellectual Ventures LLC)
• Inventors: Jacobson, Andrea M.
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US12/913,576
• Publication Number:
  US 20110093914A1
• Time in Patent Office: 846 Days
• Field of Search: 726/1, 726 22- 26, 709/224
• US Class Current: 726/26
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present disclosure relates to a method and apparatus for maintaining policy compliance on a computer network. A system in accordance with some embodiments disclosed herein performs the steps of electronically monitoring network user compliance with a network security policy stored in a database, electronically evaluating network security policy compliance based on network user compliance and electronically undertaking a network policy compliance action in response to network security policy non-compliance. The network policy compliance actions may include automatically implementing a different network security policy selected from network security policies stored in the database, generating policy effectiveness reports and providing a retraining module to network users.

Claims

1. An apparatus for managing a network compliance policy in a computer network, the apparatus comprising a computer system including at least one processor and at least one memory, wherein the computer system is configured and arranged to:

store a set of network compliance policy parameters in a database, the database being communicably coupled to the computer network;

monitor a plurality of electronic transactions from at least one user accessing the computer network;

compare each of the plurality of electronic transactions with the set of network compliance policy parameters;

prepare a network compliance policy violation report in response to one of the plurality of electronic transactions matching one of the network compliance policy parameters;

file the network policy compliance violation report;

conduct an appeals process in response to a request from the at least one user;

establish an appeal report, the appeal report being based on the appeals process; and

take action on the at least one user based on the network policy compliance violation report and the appeal report.

2. The apparatus of claim 1, wherein the set of network compliance policy parameters comprises parameters related to ethical, business and personnel parameters.

3. The apparatus of claim 2, wherein the ethical, business and personnel parameters comprise one or more of:

network hardware parameters;

electronic mail parameters;

Internet parameters;

software parameters;

document management parameters;

or

network security parameters.

4. The apparatus of claim 2, further comprising providing a means for updating the set of network compliance policy parameters.

5. The apparatus of claim 4, wherein the means for updating comprises:

means for periodically reviewing the set of network compliance policy parameters;

means for determining the viability of each of the network compliance policy parameters; and

means for adjusting the set of network compliance policy parameters based on the determination of viability.

6. The apparatus of claim 1, wherein the set of network compliance policy parameters is generated:

providing a preliminary set of network compliance policy parameters;

receiving a modified set of network compliance policy parameters from one of the users;

providing the modified set of network compliance policy parameters to each of the users; and

receiving the network compliance policy parameters.

7. The apparatus of claim 1, wherein the electronic transactions include transactions using network hardware.

8. The apparatus of claim 1, wherein the electronic transactions include electronic mail messages.

9. The apparatus of claim 1, wherein the electronic transactions include Internet activities.

10. The apparatus of claim 1, wherein the electronic transactions include transactions using network software.

11. The apparatus of claim 1, wherein the electronic transactions include network security activities.

12. The apparatus of claim 1, wherein the appeals process further comprises:

transmitting the network compliance policy violation report to the at least one user;

receiving an appeal request from the user;

determining whether a network compliance policy parameter was violated; and

recommending a course of action based on the determination.

13. The apparatus of claim 1, wherein the network policy compliance violation report for one of the users is added to a list of network policy compliance violation reports of that user.

14. The apparatus of claim 13, further comprising taking an action on that user based on the network policy compliance violation report, the appeal report and the list of network policy compliance violation reports for that user.

15. The apparatus of claim 1, wherein a preliminary set of network compliance policy parameters is based on the network policy compliance violation report.

16. The apparatus of claim 1, wherein a preliminary set of network compliance policy parameters is based on the appeal report.

17. The apparatus of claim 1, wherein the computer system is further configured and arranged to, prior to conducting the appeals process:

distribute a notification to the at least one user to respond to the filing of the network policy compliance violation report by providing confirmation of the at least one user'"'"'s attendance at a meeting to review network policies relating to the network compliance policy parameters;

receive confirmation of the at least one user'"'"'s attendance at the meeting; and

store the confirmation of the at least one user'"'"'s attendance at the meeting.

18. An article of manufacture for managing a network compliance policy in a computer network, the article of manufacture comprising a computer-readable storage device having a computer program stored therein that causes at least one network device in the computer network to perform operations comprising:

storing a set of network compliance policy parameters in a database, the database being coupled to the computer network;

monitoring multiple electronic transactions from at least one user accessing the computer network;

comparing each of the multiple electronic transactions with the set of network compliance policy parameters;

preparing a network compliance policy violation report in response to one of the multiple electronic transactions matching one of the network compliance policy parameters;

filing the network policy compliance violation report;

conducting an appeals process in response to a request from the at least one user;

establishing an appeal report, the appeal report being based on the appeals process; and

taking an action on the at least one user based on the network policy compliance violation report and the appeal report.

19. An apparatus for managing a network compliance policy in a computer network, comprising:

means for storing a set of network compliance policy parameters on a database, the database being coupled to the computer network;

means for monitoring a plurality of electronic transactions from at least one user accessing the computer network;

means for comparing each of the plurality of electronic transactions with the set of network compliance policy parameters;

means for preparing a network compliance policy violation report in response to one of the plurality of electronic transactions matching one of the network compliance policy parameters;

means for filing the network policy compliance violation report;

means for conducting an appeals process in response to a request from the at least one user;

means for establishing an appeal report, the appeal report being based on the appeals process; and

means for taking action on the at least one user based on the network policy compliance violation report and the appeal report.

20. A method, performed by a computing device having a processor and one or more memories, for managing a network compliance policy in a computer network, the method comprising:

storing a set of network compliance policy parameters in a database, the database being coupled to the computer network;

monitoring multiple electronic transactions from at least one user accessing the computer network;

comparing each of the multiple electronic transactions with the set of network compliance policy parameters;

preparing a network compliance policy violation report in response to one of the multiple electronic transactions matching one of the network compliance policy parameters;

filing the network policy compliance violation report;

conducting an appeals process in response to a request from the at least one user;

establishing an appeal report, the appeal report being based on the appeals process; and

taking an action on the at least one user based on the network policy compliance violation report and the appeal report.