Scanning and remediating configuration settings of a device using a policy-driven approach

Abstract

The present disclosure relates to systems, methods, and computer-readable media for implementing an efficient and flexible policy-driven approach to securing a computing device. For example, systems disclosed herein can enforce a first security policy of a first security standard. Systems disclosed herein can further audit for a first compliance level with the first security standard. Systems disclosed herein can further audit for a second compliance level with a second security standard. Systems disclosed herein can further determine an overlap between the first security standard and the second security standard, the overlap associated with a second security policy. Systems disclosed herein can further enforce the second security standard. Systems disclosed herein can further determine an update of the first compliance level based on the overlap.

Description

RELATED APPLICATION[0001]This patent arises from a continuation of U.S. patent application Ser. No. 16 / 125,543, (now U.S. Pat. No. 11,310,283) which was filed on Sep. 7, 2018. U.S. patent application Ser. No. 16 / 125,543 is hereby incorporated herein by reference in its entirety. Priority to U.S. patent application Ser. No. 16 / 125,543 is hereby claimed.BACKGROUND[0002]Recent years have seen rapid development in software products and electronic devices. For example, software products can affect functionality related to communication of data to and from electronic devices as well as operation of operating systems and / or individual applications installed on the electronic devices. As software and hardware become more complex, it becomes increasingly difficult to effectively secure information contained on electronic devices as well as information transmitted to and from electronic devices (e.g., over the Internet). Indeed, in an attempt to gather information, many individuals use viruse...

AI Technical Summary

Benefits of technology

The present patent provides systems, methods, and computer-readable media that can enforce security policies on a client device. These systems perform operations that enable an agent on the client device to both scan and fix security issues. There is an idealmpotent operation in which a check and fix of a security policy are the same operation. This allows the systems to efficiently identify and remediate configuration settings of a client device that are out of compliance with security standards using a single software agent. The systems also provide a policy-driven approach to enforcing security policies, which can improve performance of the client device while complying with multiple security standards. This approach is more effective in addressing potential security issues across a wider range of client devices and applications.

Problems solved by technology

As software and hardware become more complex, it becomes increasingly difficult to effectively secure information contained on electronic devices as well as information transmitted to and from electronic devices (e.g., over the Internet).

Indeed, in an attempt to gather information, many individuals use viruses, spyware, malware, and other threatening tools to gather sensitive and / or valuable information.

While many tools exist for avoiding potential threats in cybersecurity of electronic devices, conventional cybersecurity systems often fail to adequately address potential security issues.

Conventional diagnostic tools, however, are limited to providing a report of settings or configurations on a device that are out of compliance with a known set of standards.

In addition to failing to enable effective diagnosis and remediation of potential security issues, conventional cybersecurity systems can be inflexible and computationally prohibitive.

For example, conventional cybersecurity systems are often limited to scanning a device for compliance with a specific security standard (e.g., Center for Internet Security (CIS) standards, Standard Technical Implementation Guide (STIG) standards, Payment Card Industry (PCI) standards, and Health Insurance Portability and Accountability Act (HIPAA)).

However, conventional cybersecurity systems may fail to effectively identify potential security threats for other devices or programs not specifically tailored to the security standard.

Furthermore, while a device may simply run different security checks based on multiple security standards, running comprehensive checks based on multiple standards can be expensive and can utilize significant computing resources.

These along with additional problems and issues exist with regard to conventional cybersecurity systems.

Images