专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US12050696B2 Agent-based vulnerability management 有权
公开(公告)号：US12050696B2
公开(公告)日：2024-07-30
申请号：US18186688
申请日：2023-03-20
申请人： TRIPWIRE, INC.
发明人： Mark Pieno , Tyler Reguly , Darlene Hibbs , Craig Young , Lane Thames , Jamaal Scarlett , Lamar Bailey , Miles Budnek , Bob Terhune , Jon Loucks
IPC分类号： H04L9/40 , G06F9/445 , G06F16/2455 , G06F21/57
CPC分类号： G06F21/577 , G06F9/44505 , G06F16/24552 , G06F2221/034
摘要： Apparatus and methods for analyzing vulnerabilities with an agent executing on a computer host using a vulnerability scanner and vulnerability server are disclosed. In one example a method comprises, with a vulnerability scanner, searching for data associated with a vulnerability test (for example, the command that initiates the test) to determine whether the data associated with the vulnerability is available or not available. When the data associated with the vulnerability test is available in a vulnerability scanner database, the vulnerability scanner provides prior scan results generated using one or more commands specified by the data to a vulnerability aggregation server. When the data associated with the vulnerability test is not available in the vulnerability scanner database, the vulnerability scanner performs a scan of the host to obtain results associated with the vulnerability test.

2. 发明公开

US20240193280A1 RISK SCORING SYSTEM FOR VULNERABILITY MITIGATION 审中-公开
公开(公告)号：US20240193280A1
公开(公告)日：2024-06-13
申请号：US18540980
申请日：2023-12-15
申请人： Tripwire, Inc.
发明人： Tyler Reguly , Lamar Bailey , Lane Thames , Craig Young
IPC分类号： G06F21/57 , G06F17/11
CPC分类号： G06F21/577 , G06F17/11 , G06F2221/034
摘要： Apparatus, methods, and articles of manufacture or disclosed for implementing risk scoring systems used for vulnerability mitigation in a distributed computing environment. In one disclosed example, a computer-implemented method of mitigating vulnerabilities within a computing environment includes producing a risk score indicating at least one of: a vulnerability component, a security configuration component, or a file integrity component for an object within the computing environment, producing a signal score indicating a factor that contributes to risk for the object, and combining the risk score and the signal score to produce a combined risk score indicating a risk level associated with at least one vulnerability of the computing system object. In some examples, the method further includes mitigating the at least one vulnerability by changing a state of a computing object using the combined risk score.

3. 发明授权

US10795855B1 Method and apparatus for continuous compliance assessment 有权
公开(公告)号：US10795855B1
公开(公告)日：2020-10-06
申请号：US16025872
申请日：2018-07-02
申请人： Tripwire, Inc.
发明人： Robert DiFalco
IPC分类号： G06F16/00 , G06F16/11 , H04L12/26
摘要： In some embodiments, a target host may have provided the change data in response to detecting the change, and the change data may include one or more rules, settings, and/or parameters. Also, in various embodiments, the compliance server may determine whether the one or more rules, settings, and/or parameters meet one or more compliance policies and generate one or more test results based at least on the results of the determining. Further, in some embodiments, the target host may detect a change to a rule, setting, and/or parameter based on a collection policy defining what change data is to be collected by the target host and provide data associated with the rule, setting, and/or parameter as change data to the compliance server.

4. 发明授权

US10693902B1 Assessing security control quality and state in an information technology infrastructure 有权
公开(公告)号：US10693902B1
公开(公告)日：2020-06-23
申请号：US15997535
申请日：2018-06-04
申请人： Tripwire, Inc.
发明人： Marsha Haverty , Ted Schuh
IPC分类号： H04L29/06 , G06F21/45 , G06F21/55
摘要： Disclosed herein are representative embodiments of methods, apparatus, and systems for processing and managing information from one or more security control tools, such as a security configuration management tool, a vulnerability management tool, an event logging tool, or other IT infrastructure security or monitoring tool that is used to monitor, secure, and/or control assets in an IT infrastructure. For example, in some embodiments, user interfaces are disclosed that allow a user to quickly view, filter, and evaluate the degree of security control coverage in selected assets of an enterprise. In further embodiments, user interfaces are disclosed that allow a user to view and evaluate the current security state for selected assets in across a variety of categories and, in some cases, as guided by a two-dimensional vulnerability risk matrix.

5. 发明授权

US10346801B2 Interpreting categorized change information in order to build and maintain change catalogs 有权
公开(公告)号：US10346801B2
公开(公告)日：2019-07-09
申请号：US15681916
申请日：2017-08-21
申请人： Tripwire, Inc.
发明人： Thomas E. Good , Gene Ho Kim , David Whitlock
IPC分类号： G06F15/173 , G06Q10/10 , G06F16/00 , G06F16/23 , G06F16/2457
摘要： Methods, systems, and articles for receiving, by a monitor server, change data associated with a change captured on a target host, are described herein. In various embodiments, the target host may have provided the change data in response to detecting the change, and the change data may include one or more rules, settings, and/or parameters. Further, in some embodiments, the monitor server may then group the change data into clusters and may correlate the clusters with a change catalog in order to provide a possible reason or cause for the cluster of changes. Once the change data have been classified as clusters, a report may be generated providing classification or categorization and cluster information for the various changes. In various embodiments, the generating may comprise generating a report to the target host and/or to an administrative user. In various embodiments, a reason may be determined for causing a cluster of changes and the change catalog may updated with the reason.

6. 发明授权

US10318894B2 Conformance authority reconciliation 有权
公开(公告)号：US10318894B2
公开(公告)日：2019-06-11
申请号：US11205586
申请日：2005-08-16
申请人： Robert A. DiFalco , Kenneth L. Keeler , Robert L. Warmack
发明人： Robert A. DiFalco , Kenneth L. Keeler , Robert L. Warmack
IPC分类号： G06F16/11 , H04L12/24 , G06Q10/06
摘要： An automated method for facilitating management of a data processing environment is disclosed. In various embodiments, the method may include facilitating detecting of a change to an element of a data processing device of the data processing environment. In various embodiments, the method may further include facilitating reconciling the change with a conformance authority, the conformance authority having one or more guidelines. Other embodiments of the present invention may include, but are not limited to, apparatuses adapted to facilitate practice of the above-described method.

7. 发明授权

US10313257B1 Agent message delivery fairness 有权
公开(公告)号：US10313257B1
公开(公告)日：2019-06-04
申请号：US14818169
申请日：2015-08-04
申请人： Tripwire, Inc.
发明人： Gwendolyn Meredith Hunt , Benjamin J. Jansen , Eric L. Delaney , Ryan Larson , Mitch Thomas , Brian McFeely
IPC分类号： G06F15/16 , H04L12/863
摘要： Apparatus and methods are disclosed for generating, sending, and receiving messages in a networked environment using autonomous (or semi-autonomous) agents. In one example of the disclosed technology, a method of controlling message flow in a computer network comprising a plurality of agents, agent data consumers, and an agent message bridge configured to send messages by receiving a set of messages, at least some of the messages including a message type, queuing the set of messages in a spooler that includes an indication of the respective message type for each of the messages, receive an indication that sending some of the messages queued in the spooler should be delayed for one or more indicated message types, and sending at least one of the messages to a selected one or more of the agent data consumers, the sent messages not being of the indicated message types.

8. 发明授权

US10264022B2 Information technology governance and controls methods and apparatuses 有权
公开(公告)号：US10264022B2
公开(公告)日：2019-04-16
申请号：US15017243
申请日：2016-02-05
申请人： Tripwire, Inc.
发明人： Robert DiFalco , Kenneth L. Keeler , Robert L. Warmack
IPC分类号： H04L29/06 , G06Q10/00 , G06Q10/06 , G06F17/30
摘要： Embodiments of the present invention provide methods and systems for automated change audit of an enterprise's IT infrastructure, including independent detection of changes, reconciliation of detected changes and independent reporting, to effectuate a triad of controls on managing changes within the IT infrastructure, preventive controls, detective controls and corrective controls.

9. 发明授权

US10158660B1 Dynamic vulnerability correlation 有权
公开(公告)号：US10158660B1
公开(公告)日：2018-12-18
申请号：US14165410
申请日：2014-01-27
申请人： Tripwire, Inc.
发明人： Tyler Reguly , Chris Pawlukowsky , Matthew Jonathan Condren
IPC分类号： H04L29/06
摘要： Apparatus and methods are disclosed for performing dynamic vulnerability correlation suitable for use in enterprise information technology (IT) environments, including vulnerability filtering, patch correlation, and vulnerability paring. According to one disclosed embodiment, a method of vulnerability filtering includes attempting to execute vulnerability scanning rules according to a specified order in a rule hierarchy, and depending on the type of the rule hierarchy and on whether the attempt was successful, not executing additional rules in the rule hierarchy. In another disclosed embodiment, a method of patch correlation includes executing vulnerability scanning rules based on a correlation associations including, if a particular vulnerability is detected, then not executing other correlated scanning rules for a particular software patch. In another disclosed embodiment, a method of vulnerability paring includes defining a plurality of patch milestones for a software product and scanning a target computer for vulnerabilities associated with a current installed patch.

10. 发明授权

US09197604B1 Network services platform 有权
标题翻译：网络服务平台
公开(公告)号：US09197604B1
公开(公告)日：2015-11-24
申请号：US14522979
申请日：2014-10-24
申请人： Tripwire, Inc.
发明人： Alexander L. Quilter , Oliver Lavery , David J. Meltzer , Timothy D. Keanini
IPC分类号： G06F15/16 , G06F15/173 , H04L29/06 , H04L12/24
CPC分类号： H04L63/029 , H04L41/50 , H04L61/2007 , H04L61/2503 , H04L61/2535 , H04L61/2592 , H04L61/6068
摘要： A network services platform provides services to remote enterprise networks. The services platform provides a control module to a computer in the enterprise network. The control module executes on the computer and interacts with the services platform to establish an Internet Protocol (IP) tunnel between the services platform and the computer. The control module also establishes a bridge between the IP tunnel and the enterprise network. The services platform allocates a unique private IP address space to the enterprise network, and translates IP addresses in network communications between enterprise network addresses and corresponding services platform addresses in the allocated unique private address space. The services platform provides network services to the enterprise network via the IP tunnel and bridge.
摘要翻译：网络服务平台为远程企业网络提供服务。服务平台为企业网络中的计算机提供控制模块。控制模块在计算机上执行并与服务平台交互，以在服务平台和计算机之间建立互联网协议（IP）隧道。控制模块还建立IP隧道与企业网络之间的桥梁。服务平台为企业网络分配唯一的私有IP地址空间，并在分配的唯一专用地址空间中的企业网络地址与相应服务平台地址之间的网络通信中翻译IP地址。服务平台通过IP隧道和桥梁为企业网络提供网络服务。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式