Asset Attribute Segmentation for Network Security Action Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Internet security systems face challenges in accurately configuring and managing actions responsive to conditions of assets connected to a computer network, leading to false interpretations, high rates of false positives, and reduced efficacy in executing predefined actions due to incomplete or incorrect asset inventories.
Innovation Solution
A method that involves accessing and partitioning objects representing asset attributes, generating asset containers, and creating manifests to accurately categorize assets, allowing for automated actions based on defined attribute categories and risk scores, thereby ensuring accurate asset inventory management and action execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If current security systems use existing methods to manage asset conditions, then the system operation is simple, but the accuracy of action configuration is poor leading to false positives
Solution Approach 1:
The patent segments the asset management system into distinct components: asset containers representing individual assets, attribute categories for classifying conditions, and action configurations for responses. This segmentation allows precise control over which actions apply to which assets under which conditions, improving accuracy while maintaining manageable complexity through modular organization.
Solution Approach 2:
The patent introduces attribute categories as intermediaries between raw asset data and action configurations. These categories serve as mediators that translate complex asset states into manageable condition classes, enabling accurate action configuration without requiring direct complex relationships between all possible asset states and responses.
2Reliability
If asset inventory is incomplete or incorrect, then the system is easier to maintain, but the efficacy of predefined actions is reduced
Solution Approach 1:
The system continuously monitors asset conditions and compares them against defined attribute categories to trigger appropriate actions. This feedback mechanism ensures that the asset inventory remains accurate and up-to-date by automatically responding to condition changes, thereby improving action efficacy while the automated nature reduces manual maintenance complexity.
Solution Approach 2:
The patent pre-configures attribute categories and actions before actual security events occur. By establishing the framework of categories and response actions in advance, the system can quickly and accurately respond to asset conditions without complex real-time decision-making, improving reliability while simplifying operational complexity.
3Speed
If the system monitors all asset conditions in real-time, then the response time is reduced, but the computational resources consumed increase
Solution Approach 1:
Instead of processing all possible asset conditions uniformly, the system applies partial monitoring focused on conditions that match defined attribute categories. By concentrating computational resources on relevant condition categories rather than all possible asset states, the system achieves fast response times for critical conditions while reducing overall computational resource consumption through selective monitoring.
Data Source
AI summary
A method includes: generating a manifest of assets during the target time interval; labeling each asset in the manifest of assets with a set of attributes exhibited by the asset during the target time interval; defining a first attribute category exhibiting a first combination of attributes; assigning a first action to the first attribute category; identifying a subset of assets in the manifest of assets matching the first attribute category, each asset in the subset of assets exhibiting a set of attributes including the first combination of attributes; and executing the first action on the first subset of assets.