Network Asset Information Management via Real-Time Event Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network asset management systems fail to provide real-time updates and maintain accurate, dynamic information about network assets, relying on static attributes and periodic scans, which can lead to outdated data and missed vulnerabilities.
Innovation Solution
A network asset information management system that utilizes rule-based analysis of event data from various sources, including system logs and network activity, to generate real-time information on dynamic attributes such as bandwidth utilization, attacks, and risks, enabling continuous monitoring and updating of asset information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If traditional manual or automated approaches are used to track network assets, then the system can manage a limited number of assets, but the system becomes difficult to track and categorize when assets grow numerous and dispersed
Solution Approach 1:
The system enables assets to self-report their status, vulnerabilities, and changes through automated agents and connectors that continuously collect and update asset information without requiring manual intervention for each asset tracking task
Solution Approach 2:
The platform provides a unified multi-functional system that handles asset discovery, vulnerability management, patch tracking, risk assessment, and reporting across diverse asset types and IT environments through a single centralized interface
2Reliability
If periodic scanning is used to update network asset information, then the system can maintain asset data, but the information becomes outdated between scan periods
Solution Approach 1:
The system implements continuous real-time monitoring through event-driven architecture that processes asset changes, vulnerability updates, and risk events as they occur, eliminating gaps between periodic scans and ensuring asset information is always current
Solution Approach 2:
The platform incorporates feedback mechanisms where asset agents continuously report status changes, vulnerability scans provide immediate updates, and the system responds by automatically recalculating risk scores and notifying relevant stakeholders of changes
3Loss of information
If static attributes are monitored for network assets, then the system can maintain basic asset information, but dynamic attributes such as current bandwidth utilization and real-time attacks are not captured
Solution Approach 1:
The monitoring system is designed as a universal platform that simultaneously collects and analyzes both static asset attributes and dynamic operational data including bandwidth utilization, active attacks, and real-time risk metrics through integrated connectors and event processing
Solution Approach 2:
The system employs intermediary components including event connectors, data normalization layers, and risk calculation engines that bridge static asset information with dynamic network events, integrating diverse data sources into a unified real-time risk assessment framework
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A network asset information management system (101) may include an asset determination and event prioritization module (105) to generate real-time asset information based on network activity involving an asset (102). A rules module (109) may include a set of rules for monitoring the network activity involving the asset. An information analysis module (110) may evaluate the real-time asset information and the rules to generate a notification (111) related to the asset. The rules may include rules for determining vulnerabilities and risks associated with the asset based on comparison of a level of traffic identified to or from an IP address related to the asset to a predetermined threshold. The notification may include a level of risk associated with the asset.