Network Asset Importance Ranking from DNS and Certificate Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods struggle to accurately evaluate the importance of computer network assets such as hosts and IP addresses for entities, as their value or significance is not easily ascertainable without specialized knowledge or tools.
Innovation Solution
A method and system for determining asset importance by analyzing datasets such as DNS queries, source code of websites, and authentication certificates to rank hosts and IP addresses based on factors like traffic, data collection, authentication requirements, and security status, using a weighting algorithm to provide an objective evaluation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If specialized knowledge or tools are used to evaluate computer network assets, then measurement precision of asset importance is improved, but device complexity and ease of operation deteriorate
Solution Approach 1:
The patent introduces an automated evaluation system that acts as an intermediary between raw network asset data and meaningful importance metrics. The system collects data from multiple sources (DNS queries, website source code, authentication certificates) and processes it through standardized algorithms to produce objective importance rankings, eliminating the need for specialized human expertise while maintaining high measurement precision
Solution Approach 2:
The patent replaces manual evaluation methods (mechanical human analysis) with automated computational systems. The evaluation process uses algorithmic processing of DNS lookup counts, website code analysis, and certificate verification to automatically determine asset importance, substituting human specialized knowledge with machine-based objective measurement
2Measurement precision
If multiple data sources are analyzed to determine asset importance, then measurement precision is improved, but loss of time increases
Solution Approach 1:
The patent implements preliminary data collection and processing steps that prepare evaluation data in advance. The system pre-collects DNS query data, website source code, and authentication certificate information, and pre-processes this data into standardized formats ready for importance calculation, reducing the time required during actual evaluation operations
Solution Approach 2:
The patent enables continuous data collection and processing operations. The evaluation system continuously monitors DNS queries, crawls website code, and verifies certificates in real-time or near-real-time, maintaining an up-to-date understanding of asset importance without requiring periodic batch processing, thus reducing evaluation time while maintaining precision
Data Source
AI summary
Disclosed are computer-implemented methods for ranking importance of assets of an entity, in which the assets can include hosts and/or IP addresses associated with the entity. The exemplary methods can include receiving datasets from one or more sources indicating frequency of system access, system configuration, and/or application configuration. The methods can include determining one or more input data based on the datasets. The methods can include determining, for each host and/or IP address associated with the entity, an importance ranking based on the input data. In some examples, the importance ranking may be based on a weighting of two or more input data.