Network Security Verification via Aggregated Endpoint Visualization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Internet security methods lack an effective way to verify the efficacy of security technology deployment across a computer network, leading to potential vulnerabilities and inefficiencies in managing user and application permissions.
Innovation Solution
A method that involves accessing and aggregating data from various sources to generate user and application manifests, allowing for visualization and management of endpoint devices, users, and applications, thereby enhancing security technology deployment verification and management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security technology is deployed across a computer network, then security coverage is improved, but verification of deployment efficacy becomes difficult
Solution Approach 1:
The system implements feedback mechanisms by collecting data from security technologies deployed across the network and providing verification reports that indicate whether deployment is effective. The system continuously monitors security events, user activities, and system configurations to generate feedback loops that enable verification of deployment efficacy without requiring manual inspection of each security device.
Solution Approach 2:
The system introduces an intermediary verification system that acts as a mediator between security technologies and network administrators. This intermediary collects, aggregates, and analyzes data from multiple security devices, then presents consolidated verification information that simplifies the measurement of deployment efficacy across the entire network without requiring direct inspection of each individual security component.
2Loss of information
If comprehensive security monitoring is implemented, then security visibility is improved, but system complexity increases
Solution Approach 1:
The system segments the comprehensive security monitoring function into separate modular components: data collection modules that gather information from individual security devices, aggregation modules that consolidate data from multiple sources, analysis modules that process and interpret security events, and visualization modules that present findings. This segmentation allows comprehensive monitoring to be achieved through coordinated simple modules rather than a single complex system.
Solution Approach 2:
The system merges multiple security monitoring functions into a unified verification platform that consolidates data from various security technologies, users, and devices into a single integrated view. By combining collection, aggregation, analysis, and visualization capabilities into one system, the patent reduces overall complexity compared to maintaining separate monitoring systems for each security function.
3Measurement precision
If manual verification of security deployment is performed, then accuracy of verification is improved, but time consumption increases
Solution Approach 1:
The system implements self-service verification by enabling security technologies to automatically report their own deployment status, configuration states, and operational effectiveness. The system autonomously collects data from security devices, aggregates information across the network, analyzes deployment efficacy, and generates verification reports without requiring manual inspection or intervention, thereby maintaining high accuracy while dramatically reducing time consumption.
Solution Approach 2:
The system establishes continuous verification through automated data collection, aggregation, and analysis operations that run continuously or at regular intervals. Rather than performing periodic manual verification, the system maintains continuous monitoring and verification actions, providing ongoing accurate verification of security deployment efficacy while eliminating the time-consuming nature of manual spot checks.
Data Source
AI summary
A method includes: accessing objects, generated by a set of sources, representing attributes of assets, affiliated with a computer network, including a set of endpoint devices and a first application; partitioning the objects into object groups including a first object group representing the first application; aggregating objects in the first object group into a first user container representing the first application during the first time interval; and, in response to selection of the first application at an operator portal: generating a visualization representing a subset of endpoint devices, in the set of endpoint devices, on which the first application is installed during the first time interval based on a set of attributes, exhibited by the first application during the first time interval, contained in the first application container; and rendering the visualization at the operator interface.