Centralized information technology resources analysis system
View Patent ↗SecureFusion is a knowledge management system that integrates asset and risk management of Information technology resources for enterprises and provides metrics for the holistic representation of voluminous technical data. Integration of risk management, security operations and asset management creates an efficient and effective synergistic solution. SecureFusion is a solution that enables enterprises to perform real-time high speed operations research of Information Technology assets and security risks in a process-driven methodology. SecureFusion is comprised of modular, scalable components, utilizing web services to communicate with a centralized SecureFusion Portal. The myriad of data elements discovered and analyzed are converted into a knowledge-based information system. The knowledge-based system and portal provide real-time, dynamic reporting and graphic portrayal of management information for the enterprise. Metrics are used to provide a graphical global security status and scorecard. The security and asset data is summed up to provide key metrics for business leaders to understand and act on the data without having to understand the nuance of every bit and byte. The knowledge-based information system facilitates a hierarchical view of the enterprise assets and risk management data. Management is provided a score card on business unit vulnerabilities and can assign resources for corrective action as appropriate to the priority.
1. A method comprising:
building a hierarchical knowledge management system, wherein
said hierarchical knowledge management system is configured to
maintain asset information, wherein
said asset information comprises information regarding one or more assets, and
risk management information, and
said building said hierarchical knowledge management system comprises
defining a hierarchical structure, wherein
said hierarchical structure represents an organizational structure of a business,
providing a user-defined scheduling process, wherein
said user-defined scheduling process facilitates repeated collection of said risk management information,
setting a risk management threshold for one or more areas of risk, wherein
said one or more areas of risk comprise at least one of
policy compliance,
vulnerabilities,
policy compliance remediation, or
vulnerability remediation,
receiving said risk management information, wherein
said risk management information is collected from one or more data collection systems,
assigning said risk management information to said one or more of said assets,
calculating an aggregate risk metric, wherein
said calculating said aggregate risk metric is performed using said risk management information, and
said calculating said aggregate risk metric comprises calculating a risk metric for each of said one or more assets,
comparing said aggregate risk metric with said risk management threshold, wherein
said comparing comprises
updating said asset information, and
said updating said information comprises
determining whether a data item exists in said asset information, and
creating said data item in said asset information, if said data item does not exist in said asset information, and
reporting a result of said comparing.
2. The method of claim 1 , wherein
said hierarchical structure further represents
an asset category, and
one or more classifications of said asset information.
3. The method of claim 2 , wherein said calculating said aggregate risk metric for said each of said one or more assets comprises:
calculating a risk metric for said asset category and for said one or more classifications of said asset information.
4. The method of claim 1 , wherein said hierarchical structure comprises a plurality of layers, and further comprising:
comparing said data item to predetermined criteria for each layer of said hierarchical structure, wherein
said each layer of said hierarchical structure comprises said predetermined criteria, and
said predetermined criteria comprises at least one of
an organizational structure,
an asset type,
an asset class, or
an asset category, and
assigning said data item to a specific layer of said hierarchical structure, wherein
said assigning said data item is based on said predetermined criteria.
5. The method of claim 1 , wherein said determining further comprises:
selecting a reliability of identification of an asset corresponding to said data item, wherein
said selecting selects from one of media access control (MAC) address, internet protocol (IP) address, hostname, or asset identification number.
6. A system comprising:
a processor;
a data collection system, wherein
said data collection system is communicatively coupled to said processor, and
said data collection system is configured to collect risk management information;
a central data processing system, wherein
said central data processing system is communicatively coupled to said processor,
said central data processing system is communicatively coupled to receive said risk management information from said data collection system,
said central data processing system is configured to
analyze said risk management information, and
report a result of said analysis,
said central data processing system is configured to analyze said risk management information by virtue of being further configured to
define a hierarchical structure, wherein
said hierarchical structure represents an organization structure of a business,
said hierarchical structure is configured to store asset information by virtue of comprising a plurality of layers,
said asset information comprises
information regarding one or more assets, and
said risk management information, and
a top layer of said plurality of layers is configured to be accessed via a web-based portal, such that said asset information is available via a web services interface,
set a predetermined risk management threshold for one or more areas of risk, wherein
said one or more areas of risk comprise at least one of
policy compliance,
vulnerabilities,
policy compliance remediation, or
vulnerability remediation,
provide a user-defined scheduling process, wherein
said user-defined scheduling process facilitates repeated collection of said risk management information,
assign said risk management information to said one or more of said assets,
calculate an aggregate risk metric, wherein
said aggregate risk metric is calculated using said risk management information, and
said aggregate risk metric is calculated by calculating a risk metric for each of said one or more assets, and
perform a comparison of said aggregate risk metric and said risk management threshold; and
a reporting system, wherein
said reporting system is configured to
report a result of said comparison, and
provide said access to said web-based portal.
7. The system of claim 6 , wherein said top layer is further configured to provide an open interface to push data into said hierarchical structure.
8. The system of claim 6 , wherein said central data processing system is further configured to
update said asset information, wherein
said central data processing system is configured to update said asset information by virtue of being configured to
determine whether a data item exists in said asset information, and
create said data item in said asset information, if said data item does not exist in said asset information,
compare said data item to predetermined criteria for each layer of said hierarchical structure, wherein
said each layer of said hierarchical structure comprises said predetermined criteria, and
said predetermined criteria comprises at least one of
an organizational structure,
an asset type,
an asset class, or
an asset category, and
assign said data item to a specific layer of said hierarchical structure, wherein
said data item is assigned based on said predetermined criteria.
9. The method of claim 1 , further comprising:
providing a view of said asset information via a web services interface.
10. The system of claim 6 , wherein
said aggregate risk metric is calculated by calculating a risk metric for an asset category and for one or more classifications of said asset information.
11. The method of claim 1 , wherein said comparing further comprises:
comparing said data item to predetermined criteria for each layer of said hierarchical structure, wherein
said each layer of said hierarchical structure comprises said predetermined criteria, and
said predetermined criteria comprises at least one of
an organizational structure,
an asset type,
an asset class, or
an asset category, and
assigning said data item to a specific layer of said hierarchical structure, wherein
said assigning is based on said predetermined criteria.