Systems and methods for automatic discovery of systems and accounts
In various embodiments, a method comprises scanning a directory structure to generate a scan result comprising a plurality of discovered systems, identifying one or more accounts associated with at least one of the plurality of discovered systems, configuring a security appliance to change one or more old passwords to one or more new passwords for the one or more accounts, and changing, with the configured security appliance, the one or more old passwords to the one or more new passwords.
1. A method, comprising:
receiving during a registration process a registration request at a security appliance separate from a client device, the registration request being for a seeking application at the client device to access a secured application or secured database separate from the security appliance;
receiving, by the security appliance, a first program factor associated with the seeking application as part of the registration request;
confirming, by the security appliance, the first program factor to assist in confirming authorization of the seeking application to access the secured application or secured database;
receiving, by the security appliance, an access request after the registration process from the seeking application;
obtaining, by the security appliance, a program factor instance for the seeking application;
evaluating, by the security appliance, the program factor instance relative to the first program factor to assist in confirming authorization of the seeking application to access the secured application or secured database; and
altering a user right associated with a user account having access to the secured application or secured database when the authorization of the seeking application to access the secured application or secured database is confirmed, the access by the user account being based at least in part on the user right, and the altering being based at least in part on the registration request.
2. The method of claim 1 , wherein the first program factor is selected from a group consisting of a program name, a program version, a program executable hash, a dependent DLL name, shared library names, a dependent DLL version, shared library versions, environmental factors, and debugging identification.
3. The method of claim 1 , wherein the first program factor is selected from a group consisting of a system name, a fully qualified domain name (FQDN), a domain name, an IP address, a MAC address, a user name, a user ID, a CPU ID, a CPU serial number, a root disk volume ID, an OS version, and an OS type.
4. The method of claim 1 , further comprising confirming a second program factor associated with the seeking application.
5. The method of claim 4 , wherein the altering the user right is based, at least, on the confirmation of the first program factor and the confirmation of the second program factor.
6. The method of claim 1 , wherein the user right is further associated with a file, volume, or device.
7. The method of claim 1 , wherein the user right determines whether a user can view, access, make a change to, or share the secured application or secured database.
8. A system, comprising:
memory;
a hardware processor; and
a security registration module configured by the hardware processor to:
receive during a registration process a registration request at a security appliance separate from a client device, the registration request being for a seeking application at the client device to access a secured application or secured database separate from the security appliance;
receive a first program factor associated with the seeking application as part of the registration request;
confirm the first program factor to assist in confirming authorization of the seeking application to access the secured application or secured database;
receive an access request after the registration process from the seeking application;
obtain a program factor instance for the seeking application;
evaluate the program factor instance relative to the first program factor to assist in confirming authorization of the seeking application to access the secured application or secured database; and
alter a user right associated with a user account having access to the secured application or secured database when the authorization of the seeking application to access the secured application or secured database is confirmed, the access by the user account being based at least in part on the user right, and the altering being based at least in part on the registration request.
9. The system of claim 8 , wherein the first program factor is selected from a group consisting of a program name, a program version, a program executable hash, a dependent DLL name, shared library names, a dependent DLL version, shared library versions, environmental factors, and debugging identification.
10. The system of claim 8 , wherein the first program factor is selected from a group consisting of a system name, a fully qualified domain name (FQDN), a domain name, an IP address, a MAC address, a user name, a user ID, a CPU ID, a CPU serial number, a root disk volume ID, an OS version, and an OS type.
11. The system of claim 8 , wherein the security registration module is further configured by the processor to confirm a second program factor associated with the seeking application.
12. The system of claim 11 , wherein the altering the user right is based, at least, on the confirmation of the first program factor and the confirmation of the second program factor.
13. The system of claim 8 , wherein the user right is further associated with a file, volume, or device.
14. The system of claim 8 , wherein the user right determines whether a user can view, access, make a change to, or share the secured application or secured database.
15. A non-transitory computer readable medium comprising executable instructions, the instructions being executable by a processor to perform a method, the method comprising:
receiving during a registration process a registration request at a security appliance separate from a client device, the registration request being for a seeking application at the client device to access a secured application or secured database separate from the security appliance;
receiving, by the security appliance, a first program factor associated with the seeking application as part of the registration request;
confirming, by the security appliance, the first program factor to assist in confirming authorization of the seeking application to access the secured application or secured database;
receiving, by the security appliance, an access request after the registration process from the seeking application;
obtaining, by the security appliance, a program factor instance for the seeking application;
evaluating, by the security appliance, the program factor instance relative to the first program factor to assist in confirming authorization of the seeking application to access the secured application or secured database; and
altering a user right associated with a user account having access to the secured application or secured database when the authorization of the seeking application to access the secured application or secured database is confirmed, the access by the user account being based at least in part on the user right, and the altering being based at least in part on the registration request.
16. The non-transitory computer readable medium of claim 15 , wherein the first program factor is selected from a group consisting of a program name, a program version, a program executable hash, a dependent DLL name, shared library names, a dependent DLL version, shared library versions, environmental factors, and debugging identification.
17. The non-transitory computer readable medium of claim 15 , wherein the first program factor is selected from a group consisting of a system name, a fully qualified domain name (FQDN), a domain name, an IP address, a MAC address, a user name, a user ID, a CPU ID, a CPU serial number, a root disk volume ID, an OS version, and an OS type.
18. The non-transitory computer readable medium of claim 15 , the method further comprising confirming a second program factor associated with the seeking application.
19. The non-transitory computer readable medium of claim 18 , wherein the altering the user right is based, at least, on the confirmation of the first program factor and the confirmation of the second program factor.
20. The non-transitory computer readable medium of claim 15 , wherein the user right is further associated with a file, volume, or device.
21. The non-transitory computer readable medium of claim 15 , wherein the user right determines whether a user can view, access, make a change to, or share the secured application or secured database.