REAL-TIME IDENTIFICATION OF AN ASSET MODEL AND CATEGORIZATION OF AN ASSET TO ASSIST IN COMPUTER NETWORK SECURITY

摘要

The unique identifier is assigned to the network node, obtaining the corresponding "Asset Model" on the node, the node is used to determine whether a member of a particular category. Model is set for the property information about the node (e.g., the roles of the nodes in the enterprise, the software installed in the node, and a known vulnerability / weakness of the node). Identifier search module determines the identifier of the node based on the node's characteristics to be used as a key in the search data structure (IP address, hostname, network zone, and / or MAC address, etc.). Category search module that the particular node is of a particular category by using the transitive closure member so as to model a category that may be assigned to the assets model (attributes) and determines whether or not (that is, whether the in). Is stored as a transitive closure (bitmap indexing and similar), bit map for the particular asset category. ; unique identifier, the network nodes, the category