IP Library Granted Patent US 10,547,633
Granted Patent B1
US 10,547,633 · App. 15/805,160 · Granted Jan 28, 2020

Systems and methods for mapping services utilized by network domains

Inventors: Matteo Dell'Amico (Biot, FR); Pierre-Antoine Vervier (Biot, FR); Leylya Yumer (Biot, FR)
Assignee: Symantec Corporation
H04L63/1433H04L41/024H04L41/0226
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,547,633
App. No.
15/805,160
Granted
Jan 28, 2020
Kind
B1
Abstract

The disclosed computer-implemented method for mapping services utilized by network domains may include (i) receiving a request to perform a risk assessment on a domain, (ii) querying a database for records associated with the domain, where each record links to a network resource that enables functionality of the domain, (iii) generating a service map that matches each network resource to a corresponding service type and service provider, (v) performing the risk assessment of the domain, and (vi) facilitating a security measure for the domain based on a result of the risk assessment. Various other methods, systems, and computer-readable media are also disclosed.

Claims (65)

1. A computer-implemented method for mapping services utilized by network domains, at least a portion of the method being performed by a computing device comprising at least one physical processor, the method comprising:

receiving a request to perform a risk assessment on a network domain, wherein the risk assessment accounts for service provider dependencies that enable functionality of the network domain;

querying a database for a plurality of records associated with the network domain, wherein each record in the plurality of records links to a network resource that enables functionality of the network domain;

generating a service map that matches each network resource to both a service type of the network resource and a service provider that provides the network resource at least in part by translating information included in each record in the plurality of records into a name of the service provider that provides the network resource;

performing, in response to the request and based at least in part on the service map, the risk assessment of the network domain to determine a potential impact on the network domain that results from a potential failure in at least one network resource that enables functionality of the domain; and

facilitating, based at least in part on a result of the risk assessment, a security measure for the network domain that addresses the potential failure in the at least one network resource.

2. The method of claim 1 , wherein generating the service map comprises:

determining that the service type of the network resource is unknown; and

categorizing the service type of the network resource as unknown.

3. The method of claim 2 , wherein facilitating the security measure comprises:

compiling a list of uncategorized service providers based at least in part on identifying each network resource that has been categorized with a service type of unknown; and

providing the list of uncategorized service providers to an administrator to enable the administrator to categorize each service provider in the list of uncategorized service providers.

4. The method of claim 1 , wherein facilitating the security measure comprises providing a result of the risk assessment that includes the service map to a security provider that provides network security services for the network domain to enable the security provider to protect the network domain against service outages caused by failures in one or more service providers to the network domain.

5. The method of claim 1 :

further comprising generating a plurality of service maps for the network domain over a period of time; and

wherein performing the risk assessment comprises calculating, based on the plurality of service maps, a risk trajectory of the network domain that represents a change over time in a potential impact on the network domain that results from the potential failure in at least one network resource that enables functionality of the network domain.

6. The method of claim 1 :

further comprising generating a plurality of service maps that comprises a corresponding service map for each network domain in a plurality of network domains;

further comprising identifying domains in the plurality of network domains that utilize a particular network resource that is provided by a particular service provider; and

wherein performing the risk assessment comprises performing the risk assessment on the particular service provider to evaluate a potential impact on the plurality of network domains that would result from a service failure in the particular service provider.

7. The method of claim 1 :

further comprising querying the public database for a plurality of subdomain records associated with a subdomain of the network domain, wherein each subdomain record links to a subdomain network resource that enables functionality of the subdomain; and

wherein generating the service map further comprises matching each subdomain network resource to a service type of the subdomain network resource and a service provider that provides the subdomain network resource such that each subdomain network resource is represented in the service map of the network domain.

8. The method of claim 1 , wherein the public database comprises a plurality of cached results from Domain Name System queries that were performed over a specified period of time.

9. The method of claim 1 , wherein the public database comprises a Domain Name System database.

10. The method of claim 1 , wherein generating the service map comprises:

identifying an Internet Protocol address associated with a particular record in the plurality of records;

converting the Internet Protocol address into a corresponding network domain; and

matching the network resource to the service type and the service provider based at least in part on the corresponding network domain.

11. The method of claim 1 , wherein generating the service map comprises:

identifying a domain name associated with a particular record in the plurality of records;

converting the domain name associated with the particular record into a corresponding Internet Protocol address;

converting the corresponding Internet Protocol address into an additional domain name; and

matching the network resource to the service type and the service provider based at least in part on the additional domain name.

12. The method of claim 1 , wherein performing the risk assessment determines a likelihood that the network domain experiences a failure.

13. A system for mapping services utilized by network domains, the system comprising:

a receiving module, stored in memory, that receives a request to perform a risk assessment on a network domain, wherein the risk assessment accounts for service provider dependencies that enable functionality of the network domain;

a querying module, stored in memory, that queries a public database for a plurality of records associated with the network domain, wherein each record in the plurality of records links to a network resource that enables functionality of the network domain;

a generating module, stored in memory, that generates a service map that matches each network resource used by the network domain to both a service type of the network resource and a service provider that provides the network resource at least in part by translating information included in each record in the plurality of records into a name of the service provider that provides the network resource;

a performing module, stored in memory, that performs, in response to the request and based at least in part on the service map, the risk assessment of the network domain to determine a potential impact on the network domain that results from a potential failure in at least one network resource that enables functionality of the domain;

a facilitating module, stored in memory, that facilitates, based at least in part on a result of the risk assessment, a security measure for the network domain that addresses the potential failure in the at least one network resource; and

at least one physical processor configured to execute the receiving module, the querying module, the generating module, the performing module, and the facilitating module.

14. The system of claim 13 , wherein the generating module:

determines that the service type of the network resource is unknown; and

categorizes the service type of the network resource as unknown.

15. The system of claim 14 , wherein the facilitating module:

compiles a list of uncategorized service providers based at least in part on identifying each network resource that has been categorized with a service type of unknown; and

providing the list of uncategorized service providers to an administrator to enable the administrator to categorize each service provider in the list of uncategorized service providers.

16. The system of claim 13 , wherein the facilitating module facilitates the security measure by providing a result of the risk assessment that includes the service map to a security provider that provides network security services for the network domain to enable the security provider to protect the network domain against service outages caused by failures in one or more service providers to the network domain.

17. The system of claim 13 , wherein:

the generating module generates a plurality of service maps for the network domain over a period of time; and

the performing module performs the risk assessment by calculating, based on the plurality of service maps, a risk trajectory of the network domain that represents a change over time in the potential failure in at least one network resource that enables functionality of the network domain.

18. The system of claim 13 , wherein:

the generating module generates a plurality of service maps that comprises a corresponding service map for each network domain in a plurality of network domains;

the performing module identifies network domains in the plurality of network domains that utilize a particular network resource that is provided by a particular service provider; and

the performing module performs the risk assessment by performing the risk assessment on the particular service provider to evaluate a potential impact on the plurality of network domains that would result from a service failure in the particular service provider.

19. The system of claim 13 , wherein:

the querying module queries the public database for subdomain records that are associated with a subdomain of the network domain, wherein each subdomain record links to a subdomain network resource that enables functionality of the subdomain;

the generating module generates the service map by matching each subdomain network resource to a service type of the subdomain network resource and a service provider that provides the subdomain network resource.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

receive a request to perform a risk assessment on a network domain, wherein the risk assessment accounts for service provider dependencies that enable functionality of the network domain;

query a public database for a plurality of records associated with the network domain, wherein each record in the plurality of records links to a network resource that enables functionality of the network domain;

generate a service map that matches each network resource used by the network domain to both a service type of the network resource and a service provider that provides the network resource at least in part by translating information included in each record in the plurality of records into a name of the service provider that provides the network resource;

perform, in response to the request and based at least in part on the service map, the risk assessment of the network to determine a potential impact on the network domain that results from a potential failure in at least one network resource that enables functionality of the network domain; and

facilitate, based at least in part on a result of the risk assessment, a security measure for the network domain that addresses the potential failure in the at least one network resource.

Assignments (6)
CHANGE OF NAME Recorded Feb 6, 2023
From: NORTONLIFELOCK INC.
To: GEN DIGITAL INC.
Reel/Frame 062714/0605 →
NOTICE OF SUCCESSION OF AGENCY (REEL 050926 / FRAME 0560) Recorded Sep 13, 2022
From: JPMORGAN CHASE BANK, N.A.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 061422/0371 →
SECURITY AGREEMENT Recorded Sep 13, 2022
From: NORTONLIFELOCK INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062220/0001 →
CHANGE OF NAME Recorded Feb 14, 2020
From: SYMANTEC CORPORATION
To: NORTONLIFELOCK INC.
Reel/Frame 051935/0228 →
SECURITY AGREEMENT Recorded Nov 4, 2019
From: SYMANTEC CORPORATION; BLUE COAT LLC; LIFELOCK, INC,; SYMANTEC OPERATING CORPORATION
To: JPMORGAN, N.A.
Reel/Frame 050926/0560 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 7, 2017
From: DELL'AMICO, MATTEO; VERVIER, PIERRE-ANTOINE; YUMER, LEYLYA
To: SYMANTEC CORPORATION
Reel/Frame 044046/0981 →
Cited By (5)
US 12,210,483 US 12,413,495 US 12,608,340 US 12,621,331 US 12,683,852