Detecting unsanctioned network servers

Details Detecting unsanctioned network servers Detecting unsanctioned network servers

2005-03-11

2009-12-15

Barron, Jr., Gilberto (Department: 2432)

Information security

Monitoring or scanning of software or data including attack...

Reexamination Certificate

active

07634809

ABSTRACT:
An enterprise network can have sanctioned and unsanctioned servers on it. Sanctioned servers are approved by an administrator and perform tasks such as web page serving and mail routing. Unsanctioned servers are not approved by the administrator and represent possible security risks. A service monitor accesses one or more metadata sources having information describing the enterprise network, such as domain name system (DNS) records on the Internet. The service monitor analyzes the metadata and creates a security profile for the enterprise network. The security profile identifies the sanctioned servers. The service monitor monitors network traffic for compliance with the security profile, and detects unsanctioned servers on the network. The service monitor reports violations of the profile and informs the administrator of the unsanctioned servers.

REFERENCES:
patent: 7257630 (2007-08-01), Cole et al.
patent: 2002/0184533 (2002-12-01), Fox
patent: 2003/0051026 (2003-03-01), Carter et al.
patent: 2004/0103315 (2004-05-01), Cooper et al.
patent: 2004/0205149 (2004-10-01), Dillon et al.
patent: 2004/0221191 (2004-11-01), Porras et al.
patent: 2004/0255167 (2004-12-01), Knight
patent: 2005/0044242 (2005-02-01), Stevens et al.
patent: 2005/0172153 (2005-08-01), Groenendaal
patent: 2005/0229255 (2005-10-01), Gula et al.
patent: 2006/0023638 (2006-02-01), Monaco et al.
patent: 2006/0026669 (2006-02-01), Zakas
patent: 2006/0031476 (2006-02-01), Mathes et al.
patent: 2006/0212931 (2006-09-01), Shull et al.
patent: 2007/0192867 (2007-08-01), Miliefsky
Durgin, N. et al., NetState: A Network Version Tracking System, USENIX 2005 Annual Technical Conference, FREENIX Track—Abstract, [online] [Retrieved on Sep. 19, 2005] Retrieved from the Internet<URL:http://www.usenix.org/events/usenix05/tech/freenix/durgin.html>.
Van Randwyk, J. et al., “NetState A Network Version Tracking System,” FREENIX '05, Sandia National Laboratories, Apr. 14, 2005, 5 pages.
“Vanguard Enforcer™: Securing the Mainframe in the Internet Era,” Vanguard Integrity Professionals, Inc., 2004, 7 pages.

Affiliated with

Also associated with

Rating

Detecting unsanctioned network servers does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Detecting unsanctioned network servers, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Detecting unsanctioned network servers will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4082230