Network Device Isolation via Automatic Account Disabling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network systems face challenges in preventing the spread of virus threats due to rapid vulnerability exploitation and logistical difficulties in patching and updating across large networks, with existing solutions being ineffective in reducing risk once a virus has been introduced.
Innovation Solution
A system that monitors network activity for virus threats, automatically isolates infected devices by disabling their accounts, and prevents users from accessing the network to prevent further infection, thereby reducing network vulnerability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virus definition files are distributed to combat threats, then virus defense effectiveness is improved, but distribution logistics become more complex and time-consuming
Solution Approach 1:
The system enables automatic self-updating of virus definitions through a centralized server that pushes updates to client systems without manual intervention. The server automatically distributes updated definition files to infected systems, eliminating the need for manual distribution logistics while maintaining effective virus defense.
Solution Approach 2:
The system implements a feedback mechanism where infected systems report their status to the centralized server, which then automatically pushes updated virus definitions to these systems. This closed-loop feedback system ensures that virus defense effectiveness is maintained while simplifying distribution logistics through automation.
2Reliability
If patches and updates are applied across multiple computer systems, then system security is improved, but deployment time increases due to logistical challenges
Solution Approach 1:
The system enables continuous automatic updating of security patches and virus definitions without interruption to network operations. The centralized server continuously pushes updates to client systems in the background, ensuring system security is maintained while eliminating deployment time delays associated with manual patching operations.
Solution Approach 2:
Client systems automatically receive and apply security updates without manual intervention from administrators. The self-service update mechanism ensures system security is improved while deployment time is eliminated, as updates are pushed automatically to all systems in the network.
3Reliability
If Network Admission Control is used to validate system configuration, then access security is improved, but the system becomes ineffective against dynamic network threats
Solution Approach 1:
The system dynamically responds to detected virus threats by automatically isolating infected systems and pushing updated virus definitions through the centralized server. This dynamic response mechanism maintains access security while improving adaptability to dynamic network threats, as the system can quickly adjust its security measures based on real-time threat detection.
Solution Approach 2:
The system implements feedback loops where virus detection triggers automatic isolation of infected systems and pushes updated definitions to the centralized server, which then distributes updates to all systems. This feedback mechanism maintains access security while improving adaptability to dynamic threats through automated real-time response.
4Reliability
If existing virus defense software is used, then pre-defined threat protection is improved, but the system cannot respond to new or undetected threats
Solution Approach 1:
The system enables automatic self-updating of virus definitions through a centralized server that pushes new threat information to client systems without manual intervention. This self-service mechanism maintains pre-defined threat protection while improving adaptability to new threats through automated updates that expand the defense capabilities without requiring manual reconfiguration.
Solution Approach 2:
The centralized server proactively pushes updated virus definitions to client systems before new threats can spread throughout the network. This preliminary action ensures that pre-defined threat protection is maintained while improving adaptability to new threats by having updated definitions ready before they are encountered in practice.
Data Source
AI summary
A method for reducing vulnerability of a computer network to a detected virus threat includes receiving an identifier of a network device detected as a source of virus activity. The method also includes relating the identifier to a predetermined account of the detected device and then automatically disabling the device account. Accordingly, the detected device is isolated from the network to prevent infection of the network by the detected device.