Dynamic Asset Inventory for Network Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current network environments face challenges in correlating diverse computing asset data efficiently, leading to high processing demands and potential failures due to unorganized information storage across various sources.

Innovation Solution

A dynamic asset inventory function is introduced, which collects and normalizes asset information from multiple data sources, generates log files, and creates a searchable index to facilitate efficient asset identification and management within a network environment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If asset data is correlated based on common keys from multiple data sources, then comprehensive asset information can be obtained, but processing power requirements increase significantly and correlation time increases

Engineering Contradiction:
Improvecompleteness of asset informationVSAvoidprocessing power
Core Design Contradiction:
Loss of informationVSPower

Solution Approach 1:

The patent applies preliminary action by pre-collecting and normalizing asset information from multiple data sources into a standardized format before correlation is needed. The dynamic asset inventory function continuously gathers data from various sources (CMDB, asset management systems, security tools) and maintains it in a normalized structure, so when correlation is required, the data is already prepared and can be quickly matched on endpoints without intensive processing.

Inventive Principle:
Principle #10Preliminary action

2Loss of information

If asset data is correlated based on common keys from multiple data sources, then comprehensive asset information can be obtained, but correlation time increases

Engineering Contradiction:
Improvecompleteness of asset informationVSAvoidcorrelation time
Core Design Contradiction:
Loss of informationVSLoss of time

Solution Approach 1:

The system performs preliminary normalization and organization of asset data from multiple sources continuously, so that when correlation is needed, the data is already structured and ready for rapid matching. This eliminates the need for time-consuming data gathering and normalization at the moment of correlation.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary component - the dynamic asset inventory function - that acts as a mediator between multiple data sources and the correlation process. This intermediary continuously collects, normalizes, and stores asset information in a standardized format, serving as a buffer that enables rapid correlation without direct real-time processing between multiple sources.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If comprehensive asset information is collected and stored, then asset identification accuracy improves, but data organization and management complexity increases

Engineering Contradiction:
Improveasset identification accuracyVSAvoiddata organization complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent applies universality by creating a universal normalized data structure that can accommodate multiple types of asset information from different sources. The dynamic asset inventory function uses a consistent schema (including fields like asset name, asset type, asset ID, and custom attributes) that works across all data sources, eliminating the need for source-specific processing and reducing organizational complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system applies parameter changes by transforming diverse asset data from multiple sources into a standardized parameter structure. All asset information is converted to a common format with defined parameters and data types, making the data uniformly manageable while maintaining comprehensive information for accurate identification.

Inventive Principle:
Principle #35Parameter changes

4Loss of information

If data is collected from multiple different data sources, then asset information completeness improves, but processing demands increase

Engineering Contradiction:
Improveasset information completenessVSAvoidprocessing efficiency
Core Design Contradiction:
Loss of informationVSProductivity

Solution Approach 1:

The dynamic asset inventory function continuously and preliminarily collects data from multiple sources in the background, normalizing it as it arrives. This preliminary collection and normalization occurs independently of specific correlation requests, so when processing is needed, the data is already prepared, maintaining high processing efficiency while ensuring complete information coverage.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements continuous collection and normalization of asset data from multiple sources, rather than batch processing only when needed. This continuous useful action ensures data completeness is maintained while processing remains efficient, as the normalization work is performed incrementally as data arrives rather than all at once.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS11922204B1Dynamic asset inventory
Publication Date: 2024.03.05 CROWDSTRIKE
  • US11922204B1 patent drawing
  • US11922204B1 patent drawing
  • US11922204B1 patent drawing

AI summary

Methods and systems for generating and using a dynamic asset inventory are disclosed. According to an implementation, a dynamic inventory can be generated by a function included in a security agent that provides security for a network environment. First computing asset information can be collected from first data sources, and the first computing asset information can be supplemented with second computing asset information. The supplemented computing asset information can be used to generate log files for computing assets. The log files can be used to generate an asset search index that supports rapid search of the dynamic asset inventory.