Asset Model Import Connector for SIEM Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network management systems lack a common standard for interfacing with other systems and providing data, leading to inefficiencies in asset information collection, normalization, and integration with Security Information and Event Management (SIEM) systems, which hampers effective security threat detection and management.
Innovation Solution
The implementation of Asset Model Import Connectors (MICs) that collect asset information from diverse data sources, normalize it into XML format, and send it to a SIEM system for storage and analysis, enabling efficient data operations and recovery from service interruptions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple different systems are used to manage network assets, then comprehensive asset information can be collected, but the lack of common interface standards increases system complexity and integration difficulty
Solution Approach 1:
The patent implements a universal XML-based data exchange standard that enables multiple different asset management systems to communicate through a common interface. The XML schema defines standardized elements for asset information that can be universally understood across Active Directory, configuration management databases, and security information systems, eliminating the need for system-specific integration protocols
Solution Approach 2:
The patent introduces an intermediary XML data exchange layer between diverse asset management systems and the security information system. This intermediary format acts as a mediator that translates various source formats into a unified structure, simplifying integration by providing a single standard interface that all systems must adhere to
2Loss of information
If asset data is collected from multiple diverse sources, then complete asset information is obtained, but data normalization becomes more difficult without standardized formats
Solution Approach 1:
The patent enforces homogeneity by requiring all asset data from diverse sources to be normalized into a unified XML format defined by a standardized schema. This schema ensures that asset information from Active Directory, configuration management databases, and other sources follows the same structure, making data processing consistent and eliminating normalization complexity
Solution Approach 2:
The patent transforms asset data from various source formats into a standardized XML parameter structure. By changing the data representation parameters to a common XML schema with defined elements and attributes, the system maintains complete asset information while simplifying the normalization process through parameter standardization
3Reliability
If asset information is stored in proprietary formats, then each system maintains data control, but integration with security systems becomes inefficient
Solution Approach 1:
The patent creates a universal XML data format that serves multiple functions: maintaining data integrity from proprietary sources while enabling efficient integration with security information systems. The standardized schema ensures data reliability is preserved through structured validation while the common format dramatically improves integration productivity
Data Source
AI summary
An asset model import connector includes an interface to receive asset data from a data source and a normalize module. The normalize module determines an operation to be performed at a system based on the received asset data and determines code to perform the determined operation. The schema may be populated with attributes from the asset data, and sent to the system.