Automated Scan Engine Assignment for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current calendar-based scan scheduling techniques for managing enterprise security are time-consuming and complex to configure and maintain, posing challenges in efficiently protecting private computer networks from cyber threats.
Innovation Solution
The implementation of automated assessment scheduling systems that allow users to define scan scheduling preferences, with an automated scheduler determining the appropriate utilization of scan engine resources, including automated scan engine assignment, to streamline the process and reduce complexity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If calendar-based scan scheduling is used to manage enterprise security, then scan information cadence and console utilization are achieved, but the system becomes time-consuming and complex to configure and maintain
Solution Approach 1:
The system automatically discovers networks and assets, and autonomously generates scan schedules based on discovered information. The scheduler service performs self-service by automatically determining scan timing and assigning scan engines without manual configuration, eliminating the need for complex calendar-based scheduling while maintaining reliable security monitoring.
Solution Approach 2:
The patent replaces manual calendar-based scheduling mechanisms with an automated discovery and scheduling system. The mechanical process of manually configuring scan schedules is substituted with automated network discovery, asset identification, and intelligent schedule generation algorithms that adapt to the actual network state.
2Productivity
If manual scan scheduling configuration is implemented, then scan information cadence is achieved, but the process becomes time-consuming to set up and maintain
Solution Approach 1:
The system performs preliminary network discovery and asset identification before scheduling scans. By discovering networks and assets in advance and storing this information in a data structure, the system prepares the groundwork for automatic schedule generation, eliminating the need for time-consuming manual configuration while ensuring accurate scan cadence based on actual network conditions.
Solution Approach 2:
The scheduler service continuously monitors network discoveries and asset changes, using this feedback to dynamically adjust and regenerate scan schedules. This feedback loop ensures that scan information cadence is maintained automatically based on current network state, eliminating the need for manual schedule updates and reducing configuration time.
3Measurement precision
If automated network discovery is performed before scheduling, then accurate asset identification is achieved, but additional processing time is required
Solution Approach 1:
The system performs network discovery and asset identification as a preliminary step before schedule generation. By discovering networks and assets in advance and storing their information in a structured data format, the system prepares accurate asset data that enables precise scan scheduling without requiring re-discovery later, thus justifying the initial processing time through long-term accuracy benefits.
Solution Approach 2:
The system creates a data structure copy of discovered network and asset information that can be reused for schedule generation and multiple scanning operations. This copying approach allows the system to store discovery results and reuse them across different scheduling cycles, amortizing the discovery processing time over multiple operations while maintaining high asset identification accuracy.
Data Source
AI summary
Various embodiments include systems and methods of automated scan engine assignment. Responsive to determining to initiate a scan of a target asset, a scan engine assignment strategy may be determined for automatically assigning one or more scan engines to perform the scan. Determining the scan engine assignment strategy may include implementing a strategy selection scheme that defines a hierarchy of scan engine assignment strategies, which may include at least one of a passive discovery strategy, an active discovery strategy, or a scan engine subnet strategy. Using the scan engine assignment strategy, the one or more scan engines may be automatically assigned to perform the scan. The scan may be performed using the one or more scan engines.