Systems and methods for automatic discovery of systems and accounts
In various embodiments, a method comprises scanning a directory structure to generate a scan result comprising a plurality of discovered systems, identifying one or more accounts associated with at least one of the plurality of discovered systems, configuring a security appliance to change one or more old passwords to one or more new passwords for the one or more accounts, and changing, with the configured security appliance, the one or more old passwords to the one or more new passwords.
1. A method, comprising:
receiving a trusted program factor at a security appliance, the trusted program factor associated with a seeking application to access a secured application or secured database;
receiving, by the security appliance, an access request for the seeking application to access the secured application or secured database, the access request being received from a client device separate from the security appliance;
obtaining, by the security appliance, a program factor instance for the seeking application in response to the receiving the access request;
comparing, by the security appliance, the program factor instance and the trusted program factor;
confirming, by the security appliance, authorization of the seeking application to access the secured application or secured database based on the comparison; and
elevating a user right associated with a user account having access to the secured application or secured database when the authorization of the seeking application to access the secured application or database is confirmed, the access by the user account being based at least in part on the user right.
2. The method of claim 1 , wherein the trusted program factor is selected from a group consisting of a program name, a program version, a program executable hash, a dependent DLL name, shared library names, a dependent DLL version, shared library versions, environmental factors, and debugging identification.
3. The method of claim 1 , wherein the trusted program factor is selected from a group consisting of a system name, a fully qualified domain name (FQDN), a domain name, an IP address, a MAC address, a user name, a user ID, a CPU ID, a CPU serial number, a root disk volume ID, an OS version, and an OS type.
4. The method of claim 1 , wherein the user right determines whether a user can view, access, make a change to, or share the secured application or secured database.
5. A system, comprising:
memory;
a hardware processor; and
a security system module configured by the hardware processor to:
receive a trusted program factor at a security appliance, the trusted program factor associated with a seeking application to access a secured application or secured database;
receive an access request for the seeking application to access the secured application or secured database, the access request being received from a client device separate from the security appliance;
obtain a program factor instance for the seeking application in response to the receiving the access request;
compare the program factor instance and the trusted program factor;
confirm authorization of the seeking application to access the secured application or secured database based on the comparison; and
elevate a user right associated with a user account having access to the secured application or secured database when the authorization of the seeking application to access the secured application or database is confirmed, the access by the user account being based at least in part on the user right.
6. The system of claim 5 , wherein the trusted program factor is selected from a group consisting of a program name, a program version, a program executable hash, a dependent DLL name, shared library names, a dependent DLL version, shared library versions, environmental factors, and debugging identification.
7. The system of claim 5 , wherein the trusted program factor is selected from a group consisting of a system name, a fully qualified domain name (FQDN), a domain name, an IP address, a MAC address, a user name, a user ID, a CPU ID, a CPU serial number, a root disk volume ID, an OS version, and an OS type.
8. The system of claim 5 , wherein the user right determines whether a user can view, access, make a change to, or share the secured application or secured database.
9. A non-transitory computer readable medium comprising executable instructions, the instructions being executable by a processor to perform a method, the method comprising:
receiving a trusted program factor at a security appliance, the trusted program factor associated with a seeking application to access a secured application or secured database;
receiving, by the security appliance, an access request for the seeking application to access the secured application or secured database, the access request being received from a client device separate from the security appliance;
obtaining, by the security appliance, a program factor instance for the seeking application in response to the receiving the access request;
comparing, by the security appliance, the program factor instance and the trusted program factor;
confirming, by the security appliance, authorization of the seeking application to access the secured application or secured database based on the comparison; and
elevating a user right associated with a user account having access to the secured application or secured database when the authorization of the seeking application to access the secured application or database is confirmed, the access by the user account being based at least in part on the user right.
10. The non-transitory computer readable medium of claim 9 , wherein the trusted program factor is selected from a group consisting of a program name, a program version, a program executable hash, a dependent DLL name, shared library names, a dependent DLL version, shared library versions, environmental factors, and debugging identification.
11. The non-transitory computer readable medium of claim 9 , wherein the trusted program factor is selected from a group consisting of a system name, a fully qualified domain name (FQDN), a domain name, an IP address, a MAC address, a user name, a user ID, a CPU ID, a CPU serial number, a root disk volume ID, an OS version, and an OS type.
12. The non-transitory computer readable medium of claim 9 , wherein the user right determines whether a user can view, access, make a change to, or share the secured application or secured database.