Remote Security Scanning Adaptation Layer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote scanning methods for assessing computer security require custom non-standard software when the scanner and target devices run different operating systems, limiting their compatibility and increasing the need for IT resources for deployment and updates.
Innovation Solution
A system and method that utilize a scanner computer with a standard assessment library and an adaptation layer to establish a network connection with a target device, allowing the scanner to request and analyze data items across different operating systems without requiring changes to the assessment software, enabling remote scans even if the scanner and target devices have different operating systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote scanning is used without installing software on the target device, then ease of operation is improved, but compatibility between different operating systems deteriorates
Solution Approach 1:
The patent introduces an adaptation layer as an intermediary component that sits between the standard assessment library and the target device's operating system. This adaptation layer translates generic assessment requests into device-specific calls and translates device-specific responses into standardized formats, enabling the scanner to work across different operating systems without installing device-specific software on the target.
Solution Approach 2:
The scanning system is segmented into distinct functional layers: the standard assessment library (containing vendor-neutral assessment logic), the adaptation layer (handling OS-specific translations), and the target device interface. This segmentation allows each layer to be developed and maintained independently, with the adaptation layer serving as a bridge that enables cross-platform compatibility while maintaining the simplicity of remote scanning.
2Adaptability or versatility
If custom non-standard assessment software is used for different operating systems, then compatibility is improved, but device complexity and IT resource requirements worsen
Solution Approach 1:
The patent implements a universal standard assessment library that can assess multiple types of devices across different operating systems through a single codebase. The adaptation layer enables this library to work with various device types by providing a standardized interface, eliminating the need to maintain separate custom assessment software for each operating system while preserving full compatibility.
3Measurement precision
If local scanning with thick client software is used, then measurement precision is improved, but ease of operation and IT resource requirements worsen
Solution Approach 1:
The patent extracts the heavy assessment logic and measurement functions from the target device and relocates them to the remote scanner's standard assessment library. Only lightweight data collection functions remain on the target device, accessed through the adaptation layer. This extraction maintains assessment precision by keeping the sophisticated analysis logic centralized while dramatically simplifying the target device's role to mere data provision.
Data Source
AI summary
The disclosed principles describe systems and methods for assessing the security posture of a target device, wherein the assessment is performed by a scanning computer in communication with the target device via a communication network. By employing a system or method in accordance with the disclosed principles, distinct advantages are achieved. Specifically, conducting such a remote scan allows for the scanner computer to perform a remote scan of the remote device without installing client software to the remote device. Thus, the disclosed principles reduce the need for internal IT resources to manage the deployment and updates of client software on the target device. Also, conducting a remote scan according to the disclosed principles allows for the remote scan to be performed even if the scanner computer and remote device run different operating systems.