DNS Server Plug-in for Antivirus Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for enforcing antivirus security policies in enterprise networks are inefficient and resource-intensive, particularly in large environments, as they often rely on manual verification and probe applications that consume time and network resources, and struggle with ensuring all computers have necessary security software installed.
Innovation Solution
A method that intercepts user requests to access websites through a DNS server plug-in module, performing security checks to ensure compliance with antivirus policies, redirecting users to a security site if policies are not met, and providing necessary software installations or updates, thereby enforcing network antivirus security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a probe application is used to periodically check and enforce security policy compliance, then security policy enforcement capability is improved, but network resource consumption and time consumption increase significantly
Solution Approach 1:
The DNS server performs security policy compliance checks before resolving domain names for users. By integrating the security check function into the DNS resolution process, the system enforces security policies proactively before users access potentially harmful websites, eliminating the need for separate periodic probe applications and reducing time consumption.
Solution Approach 2:
The patent combines the security policy enforcement function with the DNS server's domain name resolution function. The DNS server simultaneously performs both domain name translation and security compliance verification, merging two functions into a single system to reduce network resource consumption and eliminate the need for separate probe applications.
2Reliability
If a probe application is deployed to enforce security policies across the network, then security coverage is improved, but network resource consumption increases
Solution Approach 1:
The DNS server is designed to serve multiple functions: it performs both standard domain name resolution and security policy compliance verification. By making the DNS server universal and multi-functional, the system achieves comprehensive security coverage across all network users without deploying additional specialized probe applications, thereby reducing overall network resource consumption.
Solution Approach 2:
The patent merges the security enforcement function with the existing DNS infrastructure. All DNS queries from network users pass through the DNS server, which simultaneously checks security compliance, ensuring comprehensive coverage without requiring separate probe applications that would consume additional network resources.
3Device complexity
If manual security policy implementation is required from end users, then system complexity is reduced, but security policy compliance reliability decreases
Solution Approach 1:
The DNS server provides automated feedback to users about their security compliance status. When a user's computer fails to meet security requirements, the DNS server detects this and redirects the user to a security policy implementation page, guiding them to install necessary security software or apply required patches, thereby ensuring compliance without requiring users to understand complex security policies manually.
Solution Approach 2:
The DNS server acts as an intermediary between security policy requirements and end users. Instead of requiring users to directly implement complex security policies, the DNS server mediates by automatically checking compliance and guiding users through the implementation process via redirects to security information pages, simplifying the process for users while ensuring reliable compliance.
Data Source
AI summary
A plug-in software module of a DNS server helps to enforce a network security policy. The plug-in module scans communication packets at a DNS server computer and intercepts a request from a user computer to access a web site. The intercepted request is not received by the DNS service. The plug-in module initiates a security check of the user computer over a network connection to determine if the user computer has implemented the security policy of the computer network. If the user computer does not implement the security policy then the plug-in module returns an IP address to the user computer that is the IP address of a security web site. The security web site then displays on the user's browser an indication of a security policy to be applied. The security web site may also perform the security check.