US20010001156A1 - Integrated network security access control system - Google Patents
Integrated network security access control system Download PDFInfo
- Publication number
- US20010001156A1 US20010001156A1 US09/740,295 US74029500A US2001001156A1 US 20010001156 A1 US20010001156 A1 US 20010001156A1 US 74029500 A US74029500 A US 74029500A US 2001001156 A1 US2001001156 A1 US 2001001156A1
- Authority
- US
- United States
- Prior art keywords
- network
- user
- security
- resource
- access
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/41—User authentication where a single sign-on provides access to a plurality of computers
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
- G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2101—Auditing as a secondary aspect
Abstract
A network resource security services control system comprises an integrated arrangement of security services, that are operative to control the ability of an information storage and retrieval network user to have access to and communicate with one or more information resources within the network. The security access control mechanism monitors activity associated with a user's attempt to and actual conducting of data communications with respect to a system resource, and controllably modifies one or more security relationships of a security association that has been established among the users and resources of the system, in dependence upon one or more characteristics of the monitored activity, in such a manner that affects the ability of the system user to conduct data communications with respect to a system resource.
Description
- 1. The present invention relates in general to data processing and communication systems, and is particularly directed to a data communication security access control mechanism, that is comprised of an integrated arrangement of security services, that are operative to control the ability of an information storage and retrieval network user to have access to and communicates with one or more information resources within the network. The security access control mechanism of the invention includes monitoring activity associated with a user is attempt to and actual conducting of data communications with respect to a system resource, and also the controllable modification of one or more security relationships of a security association that has been established among the users and resources of the system, in dependence upon one or more characteristics of the monitored activity, in such a manner that affects the ability of the system user to conduct data communications with respect to a system resource.
- 2. The rapid expansion of the data communications industry, in particular the Internet and the World Wide Web (WWW), sometimes referred to as the superinformation highway, has provided data processing system users with what is effectively a global communication network interconnecting a vast number of databases and other network users. The local link between the network and the user is typically by way of a phone line (e.g., analog or ISDN, for example) of a public communication service provider, with the workstation hardware including a modem or terminal adapter equipment that allows dial-up access between the user and a remote party. Since a user's workstation is coupled directly to such interface equipment, any network user ostensibly has the ability to access any information resource coupled to a network node.
- 3. As a reduced complexity, non-limiting example, FIG. 1 diagrammatically illustrates a
network user workstation 10 which is coupled via acommunication link 11 to a local area network (LAN) 20 by way of aLAN interface 13.LAN interface 13 also provides access to an external network, such as a public communication services (PCS) network, including the Internet 30, that provides potential access to any network information resource (e.g., processor-accessible digital database). The local area network 20 to whichuser 10 is connected customarily includes one or more computer-based units, such as the illustratedworkstations network server 23 andprinter 24, which are interconnected via ahub 25. Thehub 25 is connected to theLAN interface 13, so that theend user workstation 10 may access any ‘local’ information resource of the LAN 20. In order to connect to theexternal network 30, thenetwork interface 13 may be coupled through anelectronic mail gateway 32 and amodem 33, whereby a dial-up connection may be provided to an Internet connection or otherglobal resource provider 34, through which access to any node in the overall network is achieved. - 4. Because the network provides a potential window into any information resource linked to any of its nodes, it is customary to both wrap or embed all communications in a ‘security blanket’ (some form of encryption) at a communication sourcing end, and to employ one or more permission (authorization and authentication) layers that must be used to gain access to another system resource (e.g., another computer). Once installed, such schemes operate as micro security systems, primarily as binary permission filters—the user is either permitted or denied access to a destination information resource, and are customarily limited to a relatively limited (and often fixed) set of access permission criteria. Now, while such schemes provide some measure of access control, they do not provide a macro perspective or control of all of the resources for which a given network security system may be configured.
- 5. In accordance with the present invention, this problem is effectively remedied by a new and improved network resource security access control mechanism that includes protection control, access control, event management and a pro-active security agent routines integrated within the communications control software resident in a data communications network control processor, for controlling the ability of a network user to have access to and communicate with one or more information resources of the network.
- 6. The protection control routine comprises cryptography algorithms and authentication mechanisms for protecting data transported over the network. The access control routine is used in conjunction with the protection control routine and includes right to access control factors, such as time of day, length of session, etc., components, with which a user's request for access and continued activity are compared to derive inputs to the event manager. The event manager is a principal control routine that is operative to monitors activity among users and resources of the network. As it monitors these events, the event manager may take action that will controllably intervene in the current network activity for a user of interest, in response to one or more relationships associated with such activity being satisfied.
- 7. For this purpose, each network resource object has a security association with respect to every other resource object in the network, that defines the ability and permission of a respective resource object to communicate with and gain access to that other resource object. These security associations may include one or more of the users' authorization and authentication codes, lists of other objects with whom the users may or may not communicate, access time limitations, what cryptography mechanisms may be or must be used, etc. As will be described, controlled intervention by the event manager includes the ability to affect or modify this security association and thereby a user's ability to gain access to or continue to be granted access to another resource object in the network.
- 8. The event manager may employ a separate set of policy rules that are not known to the user and serve as an additional layer of access control for enhancing the security of the network, Such policy rules are established external to the network and may include a prescribed activity intensity level associated with the number of or total length of time a resource object may communicate with another resource. In the event a policy rule is violated, the event manager may take relatively limited action, such as sourcing a query to the user to provide further authentication or other information, such as a request to the protection control routine to employ an increased level of cryptography complexity associated with a higher network usage level. On the other hand, if the security rule set employed by the event manager classifies excessive user activity as a substantial network security ‘threat’, it may call up the pro-active security agent routine, so as to impair the user's ability to use the network. The security rules themselves, as objects of the overall security access control system, may be modified or updated, as required to accommodate event changes, without necessarily terminating access to the network.
- 9. The pro-active security agent routine is a data communications impairment routine, which may be selectively called up by the event manager to perform one or more data communication interference exercises with respect to a data path or user data resource object of interest. As will be described, this routine is invoked in extreme cases where the event manager has determined that a user's further use of the network would constitute a substantial security threat.
- 10.FIG. 1 diagrammatically illustrates a user workstation coupled to a local area network by way of a local area network interface, which also provides access to an external network; and
- 11.FIG. 2 diagrammatically illustrates a reduced complexity example of an information network interconnecting a plurality of information resource objects, communications among which are controlled by the network resource security services control system of the present invention.
- 12. Before describing in detail the new and improved network resource security access control mechanism in accordance with the present invention, it should be observed that the present invention resides primarily in what is effectively a new and improved data security access control mechanism implemented as an arrangement of abstract security services. These abstract security services include protection control, access control, event management and a pro-active security agent that are integrated within the communications control software resident in a data communications network control processor, for controlling the ability of a network user to have access to and communicate with one or more information resources of the network. The particular resources and the information they provide, per se, are not considered part of the invention.
- 13. Consequently, the manner in which the present invention communicates with and controls a user's access to such information resources have been illustrated in the drawings in readily understandable block diagram format, which show only those specific details that are pertinent to the present invention, so as not to obscure the disclosure with details which will be readily apparent to those skilled in the art having the benefit of the description herein. Thus, the block diagram illustrations are primarily intended to illustrate the major components of the system in a convenient functional grouping, whereby the present invention may be more readily understood. For a non-limiting example of an implementation of the present invention using industry-standard software coding, attention may be directed to the detailed software listings and attendant annotations in the attached Appendix.
- 14. Attention is now directed to FIG. 2, which shows a reduced complexity, non-limiting example of an
information resource network 100 having a plurality ofresource nodes 110, to which one or more information resource objects, such asrespective computers 120 used by user's to couple to and process data transported over the network, may be coupled, and communications among which are supervised or controlled by a network resource securityservices control system 200. As pointed out briefly above, and as will be detailed infra, network resource securityservices control system 200 communicates with each of resource and communication control objects, and includes aprotection control routine 220, andaccess control routine 230, andevent manager 240 and a pro-activesecurity agent routine 250, which interact with one another and with network resources, so as to control the ability of network users to gain access to, transmit and retrieve information with respect to any of the resources of the network. - 15. The
protection control routine 220 comprises cryptography algorithms and authentication mechanisms used by the securityservices control system 200 when transporting data over the network. Although the cryptography algorithms employed byprotection control routine 220 are not limited to any particular type, a particularly suitable scheme is that described in my co-pending U.S. patent application Ser. No. *, filed on even date, entitled “Virtual Encryption Scheme Combining Different Encryption Operators into Compound-Encryption Mechanism,” assigned to the assignee of the present application and the disclosure of which is incorporated herein. - 16. In accordance with such a virtual encryption scheme, selected ones of plurality of different encryption operators stored in an encryption operator database are combined into a compound sequence of encryption operators. Data to be transported from a data source site, such as a user workstation, to a data recipient site, such as another workstation, is sequentially encrypted by performing a compound sequential data flow through this sequence prior to transmission. Because successively different encryption operators are used, the final output of the sequence will be a compound-encrypted data stream that has no readily discernible encryption footprint. As a consequence, even if a skilled data communications usurper possesses a decryption key for each encryption operators, there is a very low likelihood that he would be able to recognize the characteristics of any individual encryption operator. Moreover, without knowledge of the sequence of encryption operators a potential usurper will be forced to operate under a severe resource penalty that makes decryption of such a compound sequence a practical impossibility. At the recipient end of the data communications path, the recovery process involves the use of a complementary virtual decryption scheme that is the exact reverse of that used at the data source site.
- 17. The
access control routine 230 is used in conjunction with theprotection control routine 220 and includes right to access control factors, such as time of day, length of session, etc., components, with which a user's request for access and continued activity are compared to derive inputs to the event manager. - 18. The
event manager 240 is a routine that monitors network activity, in particular ‘events’ occurring as a result of activity among users and resources of the network. An event is an activity that occurs when a user executes activity in the network, or as a result of exercising or using a resource or object within the system. - 19. An object is any potential participant in the system, such as a user, information resource, communication path, protection mechanism (such as a cryptography algorithm or user's authentication procedure within the protection control routine 220), an access control feature of the
access control routine 230, etc. - 20. Whenever a user initiates access to the network, multiple objects begin generating events. These events are applied to an events analyzer, which logically combines the event data into an output value. This output value is mapped through one or more rule sets producing network control prompts, which may cause the
event manager 240 to take action that will controllably intervene in the current network activity for a user of interest, in response to one or more relationships associated with such activity being satisfied. Such controlled intervention by the event manager includes the ability to affect or modify this security association and thereby a user's ability to gain access to or continue to be granted access to another resource object in the network. - 21. The pro-active
security agent routine 250 is a data communications impairment routine, which is operative to conduct one or more data communication interference exercises with respect to a data path or user data resource object of interest. As will be described, this routine is invoked in extreme cases where the event manager has determined that a user's further use of the network would constitute a substantial security threat. As a pro-active data communications mechanism,security routine 250 is effective to partially or totally impair the user's ability to use the network, such that the user will be forced to take action that will be accepted as valid entry to the network. - 22. As noted briefly above, each
network resource object 120 has asecurity association 260 with respect to every other resource object in the network. This security association defines the ability and permission of a respective resource object 120 i to communicate with and gain access to another resource object 120 j. As a non-limiting example, for a respective user's resource object, such a security association may include one or more of the user's identification codes (including one or more authorization and authentication codes), a list of other objects with whom the object may (and/or may not) communicate, limitations as to time of access (either in general and/or with those other resource objects), what cryptography mechanism that object is allowed to use, what cryptography mechanism that user must use for a given destination resource object, etc. - 23. Thus, as a relatively simple illustration of a security association between two arbitrary resource objects 120 i and 120 j, each resource object may be a respective computer user who employs a password (access authorization) and a prescribed cryptography algorithm through which communications with each other are to be conducted. As described above, cryptography algorithms and authentication mechanisms are stored within
protection control routine 220 used by the securityservices control system 200 when transporting data over the network. In the present example it may also be understood that each of the resource objects 120 i and 120 j has a limited time of access to the other object (e.g., between 8:00 A.M. and 5:00 P.M., Monday through Friday). Such authorization criteria are known to authorized users of computers 120 i and 120 j, and constitute a portion of a network usage rule set, with which such resource objects must comply when using the network. - 24. In addition to such usage rules, the
event manager 240 may also have a separate set of policy rules that are not known to the user and serve as an additional layer of access control for enhancing the security of the network. Such policy rules may include a prescribed activity intensity level, which is associated with the number of or total length of time a resource object 120 i is using the network to communicate with another resource object 120 j. The policy rules may be based upon an a priori activity histogram for other users, with which the user/resource object 120 i is expected to conform. As an example, should a resource object 120 i spend considerably more time communicating with resource object 120 j than established by the histogram, this anomaly would be detected as a violation of policy rules and cause theevent manager 240 to execute one or more responses that at least temporarily intrude into the user's network/resource object access session. - 25. Such an event manager-sourced response may include, as a non-limiting example, a query to the user to provide further authentication (which would be associated with a predefined acceptable exception to the histogram norm, allowing the user greater network time than would otherwise be allocated for the destination resource object 120 j). This aspect of the present invention contrasts with conventional schemes of simply rejecting (booting-out) a user who has failed an authorization or authentication query. Alternatively, by changing one or more aspects of the security association, the event manager may require the user to employ an increased level of cryptography complexity (associated with a higher network usage level).
- 26. As a non-limiting example of relatively severe action that may be taken, the security rule set employed by the
event manager 240 for the current data session of interest may classify excessive user activity (in violation of user unknown policy rules) as a substantial network security ‘threat’. In response to such a perceived threat, rather than immediately boot-out the user, it may begin to gradually take more drastic action, such as calling up the pro-activesecurity agent routine 250, which then begins to assert prescribed data communication interference signals over the network to the resource object of interest, reconfigure data transport routers, etc., the effect of which is to begin impairing the user's ability to use the network, requiring the user to take action that will be accepted as valid entry to the network. On the other hand if the event manager has classified user activity as a very substantial threat, the pro-active security agent routine may execute major data communication jamming/overload activity with respect to the user, so that the user cannot simply reboot and attempt to circumvent the problem. - 27. Moreover, the security rules themselves, being components or objects of the overall security access control system, may be modified or updated, as required to accommodate event changes, without necessarily terminating access to the network. Thus, in the above example of user activity that might otherwise be initially perceived as exhibiting a substantial network/resource security threat, depending upon the user's interactive response, the policy rules may allow for an adjustment to the threat threshold, before permitting or discontinuing further network access. That fact that each of the security system components is tied together through the events manager substantially facilitates integrating the security services control system into the communication control software of any size or type of data communication network.
- 28. As will be appreciated from the foregoing description, the network resource security services control system of the present invention provides an integrated arrangement of security services, that are operative to control the ability of an information storage and retrieval network user to have access to and communicate with one or more information resources within the network. This security access control mechanism includes monitoring activity associated with a user's attempt to and actual conducting of data communications with respect to a system resource, and also the controllable modification of one or more security relationships of a security association that has been established among the users and resources of the system, in dependence upon one or more characteristics of the monitored activity, in such a manner that affects the ability of the system user to conduct data communications with respect to a system resource.
- 29. While I have shown and described an embodiment in accordance with the present invention, it is to be understood that the same is not limited thereto but is susceptible to numerous changes and modifications as known to a person skilled in the art, and I therefore do not wish to be limited to the details shown and described herein, but intend to cover all such changes and modifications as are obvious to one of ordinary skill in the art.
Claims (11)
1. A method of controlling access by a network user to one or more resources of an information network comprising the steps of:
(a) establishing a security association among users and resources of said information network;
(b) selectively permitting a network user to conduct data communications with respect to a network resource in accordance with said security association;
(c) monitoring activity associated with said network user's conducting data communications with respect to said network resource in step (b); and
(d) controllably modifying one or more security relationships contained in the security association that has been established in step (a), in dependence upon one or more characteristics of said activity monitored in step (b), in a manner that affects the ability of said network user to conduct data communications with respect to a network resource.
2. A method according to , further including the step (e) of, in response to said one or more characteristics of said activity monitored in step (c) satisfying said prescribed relationship with respective to a security control procedure, increasing the difficulty of said network user to conduct further data communications with respect to a network resource.
claim 1
3. A method according to , wherein step (d) comprises in response to said one or more characteristics of said activity monitored in step (c) satisfying a prescribed relationship with respective to a security control procedure, modifying said one or more relationships of said security association so as to increase the difficulty of said network user to conduct data communications with respect to a network resource.
claim 1
4. A method according to , wherein step (d) comprises in response to said one or more characteristics of said activity monitored in step (c) satisfying a prescribed relationship with respective to a security control procedure, modifying said one or more relationships of said security association so as to require stricter verification of authorization by said user to access said information network in order to continue to conduct data communications with respect to a network resource.
claim 1
5. A method according to , wherein step (c) comprises monitoring information generated by a plurality of events associated with said network user's conducting data communications with respect to said network resource in step (b), and wherein step (d) comprises, in response to information generated by said plurality of events satisfying a predetermined relationship with respect to access control criteria governing access to and use of said information network, decreasing the ability of said network user to conduct data communications with respect to a network resource.
claim 1
6. A network resource security access control arrangement for controlling the ability of a network user to have access to and communicate with one or more information resources of the network comprising protection control, access control, and event management routines integrated within communications control mechanism resident in a data communications network control processor, said protection control routine including a plurality of cryptography operators and authentication mechanisms for protecting data transported over said network, said access control routine including control factors associated with a right to access said network, and wherein said event manager is operative to monitor activity among users and resources of the network, and to controllably intervene in network activity for a respective user, in response to one or more relationships associated with said activity being satisfied, including the ability to modify a user's ability to gain access to or continue to be granted access to another resource in said network.
7. A network resource security access control arrangement according to , further comprising a data communications impairment routine, which is selectively called up by said event manager to perform one or more data communication interference exercises with respect to a data path or user data resource of interest, in response to said event manager determining that a user's further use of the network constitutes a security threat.
claim 6
8. A network resource security access control arrangement according to , wherein a respective network resource has a security association with respect to other resources in said network, that defines the ability and permission of said respective resource to communicate with and gain access to that other resource, and wherein said event manager is operative to controllably modify one or more security relationships contained in said security association in dependence upon one or more characteristics of said activity monitored in a manner that affects the ability of said network resource to conduct data communications with respect to another network resource.
claim 6
9. A method of controlling the ability of a network user to have access to and communicate with one or more information resources of the network by a network user to one or more resources of an information network comprising the steps of:
(a) providing a protection control routine having a plurality of cryptography operators and authentication mechanisms for protecting data transported over said network, an access control routine including control factors associated with a right to access said network, and an event manager which monitors activity among users and resources of the network;
(b) selectively permitting a network user to conduct data communications with respect to a network resource in accordance with a security association among users and resources of said information network; and
(c) controllably modifying one or more security relationships contained in said security association, in dependence upon one or more characteristics of said activity monitored by said event manager, so as to affect the ability of said network user to conduct data communications with respect to a network resource.
10. A method according to , further comprising the step (d) of selectively invoking a data communications impairment routine which is operative to perform one or more data communication interference exercises with respect to a data path or user data resource of interest, in response to said event manager determining that a user's further use of the network constitutes a security threat.
claim 9
11. A method according to , wherein step (c) comprises in response to said one or more characteristics of said activity monitored by said event manager satisfying a prescribed relationship with respective to a security control procedure, modifying said one or more relationships of said security association so as to increase the difficulty of said network user to conduct data communications with respect to a network resource.
claim 9
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/740,295 US6397336B2 (en) | 1996-08-01 | 2000-12-19 | Integrated network security access control system |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US08/690,784 US5787177A (en) | 1996-08-01 | 1996-08-01 | Integrated network security access control system |
US09/054,705 US5974149A (en) | 1996-08-01 | 1998-04-03 | Integrated network security access control system |
US09/391,306 US6189104B1 (en) | 1996-08-01 | 1999-09-07 | Integrated network security access control system |
US09/740,295 US6397336B2 (en) | 1996-08-01 | 2000-12-19 | Integrated network security access control system |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/391,306 Continuation US6189104B1 (en) | 1996-08-01 | 1999-09-07 | Integrated network security access control system |
Publications (2)
Publication Number | Publication Date |
---|---|
US20010001156A1 true US20010001156A1 (en) | 2001-05-10 |
US6397336B2 US6397336B2 (en) | 2002-05-28 |
Family
ID=24773953
Family Applications (4)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US08/690,784 Expired - Lifetime US5787177A (en) | 1996-08-01 | 1996-08-01 | Integrated network security access control system |
US09/054,705 Expired - Lifetime US5974149A (en) | 1996-08-01 | 1998-04-03 | Integrated network security access control system |
US09/391,306 Expired - Lifetime US6189104B1 (en) | 1996-08-01 | 1999-09-07 | Integrated network security access control system |
US09/740,295 Expired - Lifetime US6397336B2 (en) | 1996-08-01 | 2000-12-19 | Integrated network security access control system |
Family Applications Before (3)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US08/690,784 Expired - Lifetime US5787177A (en) | 1996-08-01 | 1996-08-01 | Integrated network security access control system |
US09/054,705 Expired - Lifetime US5974149A (en) | 1996-08-01 | 1998-04-03 | Integrated network security access control system |
US09/391,306 Expired - Lifetime US6189104B1 (en) | 1996-08-01 | 1999-09-07 | Integrated network security access control system |
Country Status (1)
Country | Link |
---|---|
US (4) | US5787177A (en) |
Cited By (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020162030A1 (en) * | 2001-04-30 | 2002-10-31 | Brezak John E. | Methods and arrangements for controlling access to resources based on authentication method |
US20030005326A1 (en) * | 2001-06-29 | 2003-01-02 | Todd Flemming | Method and system for implementing a security application services provider |
WO2003060671A2 (en) * | 2002-01-04 | 2003-07-24 | Lab 7 Networks, Inc. | Communication security system |
US20040049698A1 (en) * | 2002-09-06 | 2004-03-11 | Ott Allen Eugene | Computer network security system utilizing dynamic mobile sensor agents |
WO2004049251A2 (en) * | 2002-11-25 | 2004-06-10 | Honeywell International Inc. | Method and system for monitoring and evaluating user activity in computer systems |
US20050276416A1 (en) * | 2004-06-15 | 2005-12-15 | Microsoft Corporation | Scalable layered access control for multimedia |
US7080408B1 (en) * | 2001-11-30 | 2006-07-18 | Mcafee, Inc. | Delayed-delivery quarantining of network communications having suspicious contents |
US20070016675A1 (en) * | 2005-07-13 | 2007-01-18 | Microsoft Corporation | Securing network services using network action control lists |
WO2007144504A2 (en) * | 2006-06-16 | 2007-12-21 | Olfeo | Method and system for processing security data of a computer network |
US20110179313A1 (en) * | 2010-01-19 | 2011-07-21 | Computer Associates Think, Inc. | System and Method for Correlating Empirical Data with User Experience |
US10104124B2 (en) | 2014-03-19 | 2018-10-16 | Nippon Telegraph And Telephone Corporation | Analysis rule adjustment device, analysis rule adjustment system, analysis rule adjustment method, and analysis rule adjustment program |
US20200125733A1 (en) * | 2018-10-23 | 2020-04-23 | Jpmorgan Chase Bank, N.A. | Systems and methods for using an application control prioritization index |
US10735433B2 (en) * | 2018-02-20 | 2020-08-04 | Cyberark Software Ltd. | Discovering and evaluating privileged entities in a network environment |
Families Citing this family (139)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5787177A (en) * | 1996-08-01 | 1998-07-28 | Harris Corporation | Integrated network security access control system |
EP0930758A3 (en) * | 1998-01-16 | 2003-10-15 | Kabushiki Kaisha Toshiba | A distributed network computing system |
US6338138B1 (en) * | 1998-01-27 | 2002-01-08 | Sun Microsystems, Inc. | Network-based authentication of computer user |
US6408391B1 (en) * | 1998-05-06 | 2002-06-18 | Prc Inc. | Dynamic system defense for information warfare |
US6735701B1 (en) * | 1998-06-25 | 2004-05-11 | Macarthur Investments, Llc | Network policy management and effectiveness system |
US6618385B1 (en) * | 1998-09-23 | 2003-09-09 | Cirrus Logic, Inc. | High performance, high bandwidth, and adaptive local area network communications |
JP2000148276A (en) * | 1998-11-05 | 2000-05-26 | Fujitsu Ltd | Device and method for monitoring security and securithy monitoring program recording medium |
US6530024B1 (en) * | 1998-11-20 | 2003-03-04 | Centrax Corporation | Adaptive feedback security system and method |
US7277947B1 (en) * | 1998-12-04 | 2007-10-02 | Koninklijke Philips Electronics N.V. | System and method for supporting ongoing activities and relocating the ongoing activities from one terminal to another terminal |
IL143592A0 (en) | 1998-12-07 | 2002-04-21 | Network Ice Corp | A method and apparatus for remote installation of network drivers and software |
IL143573A0 (en) | 1998-12-09 | 2002-04-21 | Network Ice Corp | A method and apparatus for providing network and computer system security |
US6266773B1 (en) * | 1998-12-31 | 2001-07-24 | Intel. Corp. | Computer security system |
US7065784B2 (en) * | 1999-07-26 | 2006-06-20 | Microsoft Corporation | Systems and methods for integrating access control with a namespace |
US7346929B1 (en) | 1999-07-29 | 2008-03-18 | International Business Machines Corporation | Method and apparatus for auditing network security |
US8006243B2 (en) | 1999-12-07 | 2011-08-23 | International Business Machines Corporation | Method and apparatus for remote installation of network drivers and software |
US7035825B1 (en) | 2000-01-04 | 2006-04-25 | E.Piphany, Inc. | Managing relationships of parties interacting on a network |
US6697865B1 (en) * | 2000-01-04 | 2004-02-24 | E.Piphany, Inc. | Managing relationships of parties interacting on a network |
US7010530B2 (en) * | 2000-01-06 | 2006-03-07 | George P. Johnson Company | Event management system |
US7328233B2 (en) * | 2000-01-19 | 2008-02-05 | Corybant, Inc. | Method and apparatus for implementing an active information model |
DE10008519C1 (en) * | 2000-02-21 | 2001-07-12 | Dica Technologies Ag | Secure E-mail communication method for internet uses security association listing with security parameters fed back to communication device of transmission domain when no listing exists for target domain |
US7257836B1 (en) * | 2000-04-24 | 2007-08-14 | Microsoft Corporation | Security link management in dynamic networks |
US7574740B1 (en) | 2000-04-28 | 2009-08-11 | International Business Machines Corporation | Method and system for intrusion detection in a computer network |
US7921459B2 (en) | 2000-04-28 | 2011-04-05 | International Business Machines Corporation | System and method for managing security events on a network |
JP4700884B2 (en) | 2000-04-28 | 2011-06-15 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Method and system for managing computer security information |
KR100401088B1 (en) * | 2000-05-12 | 2003-10-10 | 시큐아이닷컴 주식회사 | Union security service system using internet |
US7174454B2 (en) | 2002-11-19 | 2007-02-06 | America Online, Inc. | System and method for establishing historical usage-based hardware trust |
US6757822B1 (en) * | 2000-05-31 | 2004-06-29 | Networks Associates Technology, Inc. | System, method and computer program product for secure communications using a security service provider manager |
US6795856B1 (en) * | 2000-06-28 | 2004-09-21 | Accountability International, Inc. | System and method for monitoring the internet access of a computer |
US8914494B2 (en) * | 2000-06-28 | 2014-12-16 | Clinton D. Bunch | System and method for user behavioral management in a computing environment |
US6907531B1 (en) | 2000-06-30 | 2005-06-14 | Internet Security Systems, Inc. | Method and system for identifying, fixing, and updating security vulnerabilities |
US7162649B1 (en) | 2000-06-30 | 2007-01-09 | Internet Security Systems, Inc. | Method and apparatus for network assessment and authentication |
US7093239B1 (en) * | 2000-07-14 | 2006-08-15 | Internet Security Systems, Inc. | Computer immune system and method for detecting unwanted code in a computer system |
US7178166B1 (en) | 2000-09-19 | 2007-02-13 | Internet Security Systems, Inc. | Vulnerability assessment and authentication of a computer by a local scanner |
US20020042882A1 (en) * | 2000-10-10 | 2002-04-11 | Dervan R. Donald | Computer security system |
US9027121B2 (en) * | 2000-10-10 | 2015-05-05 | International Business Machines Corporation | Method and system for creating a record for one or more computer security incidents |
US7146305B2 (en) | 2000-10-24 | 2006-12-05 | Vcis, Inc. | Analytical virtual machine |
GB0027280D0 (en) * | 2000-11-08 | 2000-12-27 | Malcolm Peter | An information management system |
US7130466B2 (en) * | 2000-12-21 | 2006-10-31 | Cobion Ag | System and method for compiling images from a database and comparing the compiled images with known images |
JP4329264B2 (en) * | 2000-12-27 | 2009-09-09 | セイコーエプソン株式会社 | Access authority level control apparatus and method |
US7467212B2 (en) * | 2000-12-28 | 2008-12-16 | Intel Corporation | Control of access control lists based on social networks |
US7181618B2 (en) * | 2001-01-12 | 2007-02-20 | Hewlett-Packard Development Company, L.P. | System and method for recovering a security profile of a computer system |
US7065644B2 (en) * | 2001-01-12 | 2006-06-20 | Hewlett-Packard Development Company, L.P. | System and method for protecting a security profile of a computer system |
US6871232B2 (en) * | 2001-03-06 | 2005-03-22 | International Business Machines Corporation | Method and system for third party resource provisioning management |
US20020147803A1 (en) | 2001-01-31 | 2002-10-10 | Dodd Timothy David | Method and system for calculating risk in association with a security audit of a computer network |
US6631453B1 (en) | 2001-02-14 | 2003-10-07 | Zecurity | Secure data storage device |
WO2002097587A2 (en) * | 2001-05-31 | 2002-12-05 | Internet Security Systems, Inc. | Method and system for implementing security devices in a network |
US7237264B1 (en) | 2001-06-04 | 2007-06-26 | Internet Security Systems, Inc. | System and method for preventing network misuse |
US7657419B2 (en) | 2001-06-19 | 2010-02-02 | International Business Machines Corporation | Analytical virtual machine |
US7228421B1 (en) * | 2001-06-27 | 2007-06-05 | Cisco Technology, Inc. | Technique for generating control messages with reason information between nodes in a data network |
US20040107360A1 (en) * | 2002-12-02 | 2004-06-03 | Zone Labs, Inc. | System and Methodology for Policy Enforcement |
US6947726B2 (en) * | 2001-08-03 | 2005-09-20 | The Boeing Company | Network security architecture for a mobile network platform |
KR20030035142A (en) * | 2001-10-30 | 2003-05-09 | 주식회사 이글루시큐리티 | Method for Providing Enterprise Security Management Service |
WO2003050999A1 (en) * | 2001-12-11 | 2003-06-19 | Future Systems, Inc. | Integrated security gateway apparatus and operating method thereof |
AU2003202876A1 (en) | 2002-01-04 | 2003-07-24 | Internet Security Systems, Inc. | System and method for the managed security control of processes on a computer system |
US7855972B2 (en) * | 2002-02-08 | 2010-12-21 | Enterasys Networks, Inc. | Creating, modifying and storing service abstractions and role abstractions representing one or more packet rules |
US6807636B2 (en) * | 2002-02-13 | 2004-10-19 | Hitachi Computer Products (America), Inc. | Methods and apparatus for facilitating security in a network |
KR100457968B1 (en) * | 2002-05-01 | 2004-11-26 | 정보통신연구진흥원 | Apparatus and method for detecting intrusion of unauthorized signal |
US7370360B2 (en) | 2002-05-13 | 2008-05-06 | International Business Machines Corporation | Computer immune system and method for detecting unwanted code in a P-code or partially compiled native-code program executing within a virtual machine |
US20030221119A1 (en) * | 2002-05-21 | 2003-11-27 | Geiger Richard Gustav | Methods and apparatus for communicating with a security access control system |
WO2004001540A2 (en) * | 2002-06-21 | 2003-12-31 | Probix, Inc. | Method and system for protecting digital objects distributed over a network using an electronic mail interface |
WO2004008683A2 (en) * | 2002-07-16 | 2004-01-22 | Haim Engler | Automated network security system and method |
KR20040008375A (en) * | 2002-07-18 | 2004-01-31 | 광주과학기술원 | Intrusion detection method and recording media based on common features of abnormal behavior |
US20040054790A1 (en) * | 2002-09-12 | 2004-03-18 | International Business Machines Corporation | Management of security objects controlling access to resources |
WO2004046895A2 (en) | 2002-11-20 | 2004-06-03 | Corybant, Inc. | Interactive voice enabled email notification and alert system and method |
US7305554B2 (en) * | 2002-12-16 | 2007-12-04 | Alcatel Canada Inc. | Dynamic acquisition of state during security system reconfiguration |
US20040123112A1 (en) * | 2002-12-19 | 2004-06-24 | International Business Machines Corporation | Security object providing encryption scheme and key |
US8209259B2 (en) * | 2003-01-09 | 2012-06-26 | Adp Dealer Services, Inc. | Software business platform with networked, association-based business entity access management |
KR20040065674A (en) * | 2003-01-15 | 2004-07-23 | 권창훈 | Host-based security system and method |
US6900924B2 (en) * | 2003-01-16 | 2005-05-31 | Canon Kabushiki Kaisha | Driving method of electrophoretic display |
US7913303B1 (en) | 2003-01-21 | 2011-03-22 | International Business Machines Corporation | Method and system for dynamically protecting a computer system from attack |
US7614078B1 (en) * | 2003-04-02 | 2009-11-03 | Cisco Technology, Inc. | Threshold access based upon stored credentials |
US7653936B2 (en) * | 2003-06-25 | 2010-01-26 | Microsoft Corporation | Distributed expression-based access control |
US20050021977A1 (en) * | 2003-06-25 | 2005-01-27 | Microsoft Corporation | Expression-based access control |
US8539063B1 (en) | 2003-08-29 | 2013-09-17 | Mcafee, Inc. | Method and system for containment of networked application client software by explicit human input |
US7657938B2 (en) | 2003-10-28 | 2010-02-02 | International Business Machines Corporation | Method and system for protecting computer networks by altering unwanted network data traffic |
JP4014165B2 (en) * | 2003-10-29 | 2007-11-28 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Access management system, access execution device, access execution program, access execution method, and recording medium |
US7840968B1 (en) | 2003-12-17 | 2010-11-23 | Mcafee, Inc. | Method and system for containment of usage of language interfaces |
US7783735B1 (en) * | 2004-03-22 | 2010-08-24 | Mcafee, Inc. | Containment of network communication |
US7873955B1 (en) | 2004-09-07 | 2011-01-18 | Mcafee, Inc. | Solidifying the executable software set of a computer |
US20060109960A1 (en) * | 2004-10-25 | 2006-05-25 | D Evelyn Linda K | System and method for unilateral verification of caller location information |
US7603552B1 (en) | 2005-05-04 | 2009-10-13 | Mcafee, Inc. | Piracy prevention using unique module translation |
US7856661B1 (en) | 2005-07-14 | 2010-12-21 | Mcafee, Inc. | Classification of software on networked systems |
US8291377B2 (en) * | 2006-01-25 | 2012-10-16 | Microsoft Corporation | External configuration of processing content for script |
US7757269B1 (en) | 2006-02-02 | 2010-07-13 | Mcafee, Inc. | Enforcing alignment of approved changes and deployed changes in the software change life-cycle |
US7895573B1 (en) | 2006-03-27 | 2011-02-22 | Mcafee, Inc. | Execution environment file inventory |
US7870387B1 (en) | 2006-04-07 | 2011-01-11 | Mcafee, Inc. | Program-based authorization |
US8352930B1 (en) | 2006-04-24 | 2013-01-08 | Mcafee, Inc. | Software modification by group to minimize breakage |
US8555404B1 (en) | 2006-05-18 | 2013-10-08 | Mcafee, Inc. | Connectivity-based authorization |
US9424154B2 (en) | 2007-01-10 | 2016-08-23 | Mcafee, Inc. | Method of and system for computer system state checks |
US8332929B1 (en) | 2007-01-10 | 2012-12-11 | Mcafee, Inc. | Method and apparatus for process enforced configuration management |
US20080172715A1 (en) * | 2007-01-12 | 2008-07-17 | Microsoft Corporation | Scalable context-based authentication |
US7911955B2 (en) * | 2007-01-31 | 2011-03-22 | Hewlett-Packard Development Company, L.P. | Coordinated media control system |
KR100838799B1 (en) | 2007-03-09 | 2008-06-17 | 에스케이 텔레콤주식회사 | System and operating method of detecting hacking happening for complementary security management system |
US8195931B1 (en) | 2007-10-31 | 2012-06-05 | Mcafee, Inc. | Application change control |
US8701189B2 (en) | 2008-01-31 | 2014-04-15 | Mcafee, Inc. | Method of and system for computer system denial-of-service protection |
US8615502B2 (en) | 2008-04-18 | 2013-12-24 | Mcafee, Inc. | Method of and system for reverse mapping vnode pointers |
US7894350B2 (en) * | 2008-07-24 | 2011-02-22 | Zscaler, Inc. | Global network monitoring |
US20100043049A1 (en) * | 2008-08-15 | 2010-02-18 | Carter Stephen R | Identity and policy enabled collaboration |
US8544003B1 (en) | 2008-12-11 | 2013-09-24 | Mcafee, Inc. | System and method for managing virtual machine configurations |
US8341627B2 (en) | 2009-08-21 | 2012-12-25 | Mcafee, Inc. | Method and system for providing user space address protection from writable memory area in a virtual environment |
US8381284B2 (en) | 2009-08-21 | 2013-02-19 | Mcafee, Inc. | System and method for enforcing security policies in a virtual environment |
US9552497B2 (en) | 2009-11-10 | 2017-01-24 | Mcafee, Inc. | System and method for preventing data loss using virtual machine wrapped applications |
CN101860526B (en) * | 2009-12-22 | 2012-10-03 | 中国航空工业集团公司第六三一研究所 | Method for controlling multilevel access to integrated avionics system |
KR100984282B1 (en) | 2010-03-04 | 2010-09-30 | 주식회사 이글루시큐리티 | An enterprise security management system using an memory cache |
US8659431B2 (en) * | 2010-03-15 | 2014-02-25 | Leola Brown | Method and apparatus of monitoring and updating security personnel information |
US8925101B2 (en) | 2010-07-28 | 2014-12-30 | Mcafee, Inc. | System and method for local protection against malicious software |
US8938800B2 (en) | 2010-07-28 | 2015-01-20 | Mcafee, Inc. | System and method for network level protection against malicious software |
US8549003B1 (en) | 2010-09-12 | 2013-10-01 | Mcafee, Inc. | System and method for clustering host inventories |
US9075993B2 (en) | 2011-01-24 | 2015-07-07 | Mcafee, Inc. | System and method for selectively grouping and managing program files |
US10482475B2 (en) | 2011-02-10 | 2019-11-19 | Adp Dealer Services, Inc. | Systems and methods for providing targeted advertising |
US9112830B2 (en) | 2011-02-23 | 2015-08-18 | Mcafee, Inc. | System and method for interlocking a host and a gateway |
WO2013022002A1 (en) | 2011-08-10 | 2013-02-14 | みずほ情報総研 株式会社 | Information management system and information management method |
US9594881B2 (en) | 2011-09-09 | 2017-03-14 | Mcafee, Inc. | System and method for passive threat detection using virtual memory inspection |
US8694738B2 (en) | 2011-10-11 | 2014-04-08 | Mcafee, Inc. | System and method for critical address space protection in a hypervisor environment |
US8973144B2 (en) | 2011-10-13 | 2015-03-03 | Mcafee, Inc. | System and method for kernel rootkit protection in a hypervisor environment |
US9069586B2 (en) | 2011-10-13 | 2015-06-30 | Mcafee, Inc. | System and method for kernel rootkit protection in a hypervisor environment |
US8800024B2 (en) | 2011-10-17 | 2014-08-05 | Mcafee, Inc. | System and method for host-initiated firewall discovery in a network environment |
US8713668B2 (en) * | 2011-10-17 | 2014-04-29 | Mcafee, Inc. | System and method for redirected firewall discovery in a network environment |
US8739272B1 (en) | 2012-04-02 | 2014-05-27 | Mcafee, Inc. | System and method for interlocking a host and a gateway |
US9047442B2 (en) * | 2012-06-18 | 2015-06-02 | Microsoft Technology Licensing, Llc | Provisioning managed devices with states of arbitrary type |
US8973146B2 (en) | 2012-12-27 | 2015-03-03 | Mcafee, Inc. | Herd based scan avoidance system in a network environment |
US9003550B2 (en) * | 2012-12-31 | 2015-04-07 | SmartBridge, LLC | Systems and methods for crisis management and situational awareness |
US11080734B2 (en) | 2013-03-15 | 2021-08-03 | Cdk Global, Llc | Pricing system for identifying prices for vehicles offered by vehicle dealerships and other entities |
WO2015060857A1 (en) | 2013-10-24 | 2015-04-30 | Mcafee, Inc. | Agent assisted malicious application blocking in a network environment |
CN103546574B (en) * | 2013-10-30 | 2016-05-25 | 中国航空工业集团公司第六三一研究所 | A kind of airborne built-in network file access control method based on static configuration table |
US20160050066A1 (en) * | 2014-08-13 | 2016-02-18 | Louis Nunzio Loizides | Management of an encryption key for a secure data storage device on a trusted device paired to the secure device over a personal area network |
US10853769B2 (en) | 2016-04-21 | 2020-12-01 | Cdk Global Llc | Scheduling an automobile service appointment in a dealer service bay based on diagnostic trouble codes and service bay attributes |
US10867285B2 (en) | 2016-04-21 | 2020-12-15 | Cdk Global, Llc | Automatic automobile repair service scheduling based on diagnostic trouble codes and service center attributes |
US10332068B2 (en) | 2016-04-21 | 2019-06-25 | Cdk Global, Llc | Systems and methods for stocking an automobile |
US10326858B2 (en) | 2017-05-23 | 2019-06-18 | Cdk Global, Llc | System and method for dynamically generating personalized websites |
US11501351B2 (en) | 2018-03-21 | 2022-11-15 | Cdk Global, Llc | Servers, systems, and methods for single sign-on of an automotive commerce exchange |
US11190608B2 (en) | 2018-03-21 | 2021-11-30 | Cdk Global Llc | Systems and methods for an automotive commerce exchange |
US11122054B2 (en) | 2019-08-27 | 2021-09-14 | Bank Of America Corporation | Security tool |
US11244058B2 (en) | 2019-09-18 | 2022-02-08 | Bank Of America Corporation | Security tool |
US11245703B2 (en) | 2019-09-27 | 2022-02-08 | Bank Of America Corporation | Security tool for considering multiple security contexts |
CN111796858B (en) * | 2020-07-07 | 2024-03-22 | 金蝶软件(中国)有限公司 | Method, system and related equipment for detecting access of application programs in Kubernetes cluster |
US11080105B1 (en) | 2020-11-18 | 2021-08-03 | Cdk Global, Llc | Systems, methods, and apparatuses for routing API calls |
US11514021B2 (en) | 2021-01-22 | 2022-11-29 | Cdk Global, Llc | Systems, methods, and apparatuses for scanning a legacy database |
US11803535B2 (en) | 2021-05-24 | 2023-10-31 | Cdk Global, Llc | Systems, methods, and apparatuses for simultaneously running parallel databases |
Family Cites Families (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3245045A (en) * | 1961-11-21 | 1966-04-05 | Ibm | Integrated data processing system |
US3798605A (en) * | 1971-06-30 | 1974-03-19 | Ibm | Centralized verification system |
US3931504A (en) * | 1972-02-07 | 1976-01-06 | Basic Computing Arts, Inc. | Electronic data processing security system and method |
US3858182A (en) * | 1972-10-10 | 1974-12-31 | Digital Equipment Corp | Computer program protection means |
US4827508A (en) * | 1986-10-14 | 1989-05-02 | Personal Library Software, Inc. | Database usage metering and protection system and method |
US4961224A (en) * | 1989-03-06 | 1990-10-02 | Darby Yung | Controlling access to network resources |
US5204961A (en) * | 1990-06-25 | 1993-04-20 | Digital Equipment Corporation | Computer network operating with multilevel hierarchical security with selectable common trust realms and corresponding security protocols |
CN1286010C (en) * | 1994-04-05 | 2006-11-22 | 英特尔公司 | Method and device for monitoring and controlling program in network |
US6088451A (en) * | 1996-06-28 | 2000-07-11 | Mci Communications Corporation | Security system and method for network element access |
US5787177A (en) * | 1996-08-01 | 1998-07-28 | Harris Corporation | Integrated network security access control system |
-
1996
- 1996-08-01 US US08/690,784 patent/US5787177A/en not_active Expired - Lifetime
-
1998
- 1998-04-03 US US09/054,705 patent/US5974149A/en not_active Expired - Lifetime
-
1999
- 1999-09-07 US US09/391,306 patent/US6189104B1/en not_active Expired - Lifetime
-
2000
- 2000-12-19 US US09/740,295 patent/US6397336B2/en not_active Expired - Lifetime
Cited By (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020162030A1 (en) * | 2001-04-30 | 2002-10-31 | Brezak John E. | Methods and arrangements for controlling access to resources based on authentication method |
US7305701B2 (en) * | 2001-04-30 | 2007-12-04 | Microsoft Corporation | Methods and arrangements for controlling access to resources based on authentication method |
US20030005326A1 (en) * | 2001-06-29 | 2003-01-02 | Todd Flemming | Method and system for implementing a security application services provider |
US7080408B1 (en) * | 2001-11-30 | 2006-07-18 | Mcafee, Inc. | Delayed-delivery quarantining of network communications having suspicious contents |
WO2003060671A2 (en) * | 2002-01-04 | 2003-07-24 | Lab 7 Networks, Inc. | Communication security system |
WO2003060671A3 (en) * | 2002-01-04 | 2003-11-20 | Lab 7 Networks Inc | Communication security system |
US20040049698A1 (en) * | 2002-09-06 | 2004-03-11 | Ott Allen Eugene | Computer network security system utilizing dynamic mobile sensor agents |
WO2004049251A2 (en) * | 2002-11-25 | 2004-06-10 | Honeywell International Inc. | Method and system for monitoring and evaluating user activity in computer systems |
WO2004049251A3 (en) * | 2002-11-25 | 2004-11-04 | Honeywell Int Inc | Method and system for monitoring and evaluating user activity in computer systems |
US7421738B2 (en) | 2002-11-25 | 2008-09-02 | Honeywell International Inc. | Skeptical system |
US20050276416A1 (en) * | 2004-06-15 | 2005-12-15 | Microsoft Corporation | Scalable layered access control for multimedia |
US7756271B2 (en) * | 2004-06-15 | 2010-07-13 | Microsoft Corporation | Scalable layered access control for multimedia |
US20070016675A1 (en) * | 2005-07-13 | 2007-01-18 | Microsoft Corporation | Securing network services using network action control lists |
US7603708B2 (en) * | 2005-07-13 | 2009-10-13 | Microsoft Corporation | Securing network services using network action control lists |
US20090172772A1 (en) * | 2006-06-16 | 2009-07-02 | Olfeo | Method and system for processing security data of a computer network |
WO2007144504A3 (en) * | 2006-06-16 | 2008-03-20 | Olfeo | Method and system for processing security data of a computer network |
WO2007144504A2 (en) * | 2006-06-16 | 2007-12-21 | Olfeo | Method and system for processing security data of a computer network |
US20110179313A1 (en) * | 2010-01-19 | 2011-07-21 | Computer Associates Think, Inc. | System and Method for Correlating Empirical Data with User Experience |
US9201752B2 (en) * | 2010-01-19 | 2015-12-01 | Ca, Inc. | System and method for correlating empirical data with user experience |
US10104124B2 (en) | 2014-03-19 | 2018-10-16 | Nippon Telegraph And Telephone Corporation | Analysis rule adjustment device, analysis rule adjustment system, analysis rule adjustment method, and analysis rule adjustment program |
US10735433B2 (en) * | 2018-02-20 | 2020-08-04 | Cyberark Software Ltd. | Discovering and evaluating privileged entities in a network environment |
US20200125733A1 (en) * | 2018-10-23 | 2020-04-23 | Jpmorgan Chase Bank, N.A. | Systems and methods for using an application control prioritization index |
US11093618B2 (en) * | 2018-10-23 | 2021-08-17 | Jpmorgan Chase Bank, N.A. | Systems and methods for using an application control prioritization index |
Also Published As
Publication number | Publication date |
---|---|
US6397336B2 (en) | 2002-05-28 |
US5974149A (en) | 1999-10-26 |
US6189104B1 (en) | 2001-02-13 |
US5787177A (en) | 1998-07-28 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6189104B1 (en) | Integrated network security access control system | |
US10313355B2 (en) | Client side security management for an operations, administration and maintenance system for wireless clients | |
US5845068A (en) | Multilevel security port methods, apparatuses, and computer program products | |
US8065425B2 (en) | Access control in client-server systems | |
US5440633A (en) | Communication network access method and system | |
US6684329B1 (en) | System and method for increasing the resiliency of firewall systems | |
US20060190997A1 (en) | Method and system for transparent in-line protection of an electronic communications network | |
US20090313682A1 (en) | Enterprise Multi-interceptor Based Security and Auditing Method and Apparatus | |
JPH07502847A (en) | Apparatus and method for network security protection | |
Lu et al. | A model for multilevel security in computer networks | |
Biskup et al. | Transaction-based pseudonyms in audit data for privacy respecting intrusion detection | |
US7131142B1 (en) | Intelligent agents used to provide agent community security | |
Anderson | A unification of computer and network security concepts | |
EP1280315B1 (en) | Apparatus and method for providing network security | |
US20060031932A1 (en) | Method and system for security control in an organization | |
US20030135738A1 (en) | Compartmented multi operator network management | |
Johnson et al. | A Mission Critical Approach to Network Security | |
Knight et al. | Secure Remote Management in the ESPRIT MIDAS Project. | |
Barka et al. | Managing access and usage controls in SNMP | |
Abdugafforovich | Information Security Problems of Computer Networks | |
Androutsopoulos et al. | Surveillance and protection in IBC management: The applicability of two RACE security projects—Securenet II and SESAME | |
Morrissey et al. | Increased domain security through application of local security and monitoring | |
Cuadros et al. | Design of a Secure Local Network | |
Katsikas | Surveillance and Protection in IBC Management The Applicability of Two RACE Security Projects-SecureNet II and SESAME Dimitris Androutsopoulos (Expertnet), Per Kaijser (Siemens Nixdorf); Socratis Katsikas (Univ. of Aegean), Kare Presttun (Alcatel), Don Salmon (ICL), Paul Spirakis (Univ. of Patras) | |
Nikitakos et al. | Security profile for interconnected open distributed systems with varying vulnerability |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
FPAY | Fee payment |
Year of fee payment: 4 |
|
FPAY | Fee payment |
Year of fee payment: 8 |
|
FPAY | Fee payment |
Year of fee payment: 12 |