Methods and system for updating cyber-security status of networked assets
Methods, systems, and devices for updating cyber security status of networked assets are disclosed. In some embodiments, first asset data indicating existence of a first cyber-security risk associated with an asset and a second asset data indicating execution of an action that is configured to respond to the first cyber-security risk may be received at a device configured with synchronizing the security status of the networked assets. The device may then convert the second asset data into the format of the first asset data and transmit the same to the monitoring system that provided the first asset data to the device for asset status synchronization.
1 . A method comprising:
receiving, using at least one processor, a first asset data in a first format from a monitoring system configured to monitor a networked system including a first asset, the first asset data indicating existence of a first cyber-security risk associated with the first asset;
receiving, using the at least one processor, a second asset data indicating execution of an action that is configured to respond to the first cyber-security risk;
transforming, using the at least one processor, the second asset data into the first format of the first asset data;
generating, using the at least one processor, a first action script using the transformed second asset data, the first action script configured to cause the monitoring system to update a status of the first asset using the transformed second asset data, wherein the update of the status includes a change to a configuration of the first asset;
transmitting, using the at least one processor, the first action script to the monitoring system;
receiving, using the at least one processor, a third asset data in a second format from the monitoring system, the third asset data indicating existence of a second cyber-security risk associated with a second asset;
receiving, using the at least one processor, a fourth asset data indicating execution of a second action that is configured to respond to the second cyber-security risk; and
determining, using the at least one processor, whether to perform serially or in parallel the transforming the second asset data and transforming the third asset data into a third format of the third asset data.
2 . The method of claim 1 , further comprising:
generating, using the at least one processor, a second action script in response to the receiving the first asset data, the second action script indicating the action to be executed to respond to the first cyber-security risk associated with the first asset.
3 . The method of claim 1 , wherein:
the first cyber-security risk includes a new device establishing a connection with the first asset; and
the second asset data indicates quarantining of, or registration of, the new device, the quarantining or the registration occurring after the new device is determined to be unauthorized or authorized, respectively.
4 . The method of claim 3 , wherein the first action script causes the monitoring system to update the status of the new device as a new asset of the networked system when the transformed second asset data indicates the registration of the new device.
5 . The method of claim 1 , wherein:
the first cyber-security risk includes an increased data transmission by the first asset; and
the second asset data indicates quarantining of the first asset, the quarantining occurring after the first asset is determined to be compromised.
6 . The method of claim 1 , wherein the first asset is an Internet-of-Things sensor, a medical alert system, or a third-party integration device.
7 . The method of claim 1 , wherein the first format is a table.
8 . The method of claim 1 , wherein the second format is a list.
9 . A system comprising:
at least one computer-readable medium storing computer-executable instructions; and
at least one processor configured to execute the computer executable instructions to cause the system to perform operations comprising:
receiving, using at least one processor, a first asset data in a first format from a monitoring system configured to monitor a networked system including a first asset, the first asset data indicating existence of a first cyber-security risk associated with the first asset;
receiving, using the at least one processor, a second asset data indicating execution of an action that is configured to respond to the first cyber-security risk;
transforming, using the at least one processor, the second asset data into the first format of the first asset data;
generating, using the at least one processor, a first action script using the transformed second asset data, the first action script configured to cause the monitoring system to update a status of the first asset using the transformed second asset data;
transmitting, using the at least one processor, the first action script to the monitoring system,
receiving, using the at least one processor, a third asset data in a second format from the monitoring system, the third asset data indicating existence of a second cyber-security risk associated with a second asset;
receiving, using the at least one processor, a fourth asset data indicating execution of a second action that is configured to respond to the second cyber-security risk; and
determining, using the at least one processor, whether to perform serially or in parallel the transforming the second asset data and transforming the third asset data into the third format of the third asset data.
10 . The system of claim 9 , wherein the operations further comprise:
generating, using the at least one processor, a second action script in response to the receiving the first asset data, the second action script indicating the action to be executed to respond to the first cyber-security risk associated with the first asset.
11 . The system of claim 9 , wherein:
the first cyber-security risk includes a new device establishing a connection with the first asset; and
the second asset data indicates quarantining of, or registration of, the new device, the quarantining or the registration occurring after the new device is determined to be unauthorized or authorized, respectively.
12 . The system of claim 11 , wherein the first action script causes the monitoring system to update the status of the new device as a new asset of the networked system when the transformed second asset data indicates the registration of the new device.
13 . The system of claim 9 , wherein:
the first cyber-security risk includes an increased data transmission by the first asset; and
the second asset data indicates quarantining of the first asset, the quarantining occurring after the first asset is determined to be compromised.
14 . The system of claim 9 , wherein the first asset is an Internet-of-Things sensor, a medical alert system, or a third-party integration device.
15 . A non-transitory computer readable medium comprising at least one program for execution by at least one processor of a system, the at least one program including instructions which, when executed by the at least one processor, cause the system to perform operations comprising:
receiving, using at least one processor, a first asset data in a first format from a monitoring system configured to monitor a networked system including a first asset, the first asset data indicating existence of a first cyber-security risk associated with the first asset;
receiving, using the at least one processor, a second asset data indicating execution of an action that is configured to respond to the first cyber-security risk;
transforming, using the at least one processor, the second asset data into the first format of the first asset data;
generating, using the at least one processor, a first action script using the transformed second asset data, the first action script configured to cause the monitoring system to update a status of the first asset using the transformed second asset data, wherein the update to the status includes a change to a configuration of the first asset;
transmitting, using the at least one processor, the first action script to the monitoring system;
receiving, using the at least one processor, a third asset data in a second format from the monitoring system, the third asset data indicating existence of a second cyber-security risk associated with a second asset;
receiving, using the at least one processor, a fourth asset data indicating execution of a second action that is configured to respond to the second cyber-security risk; and
determining, using the at least one processor, whether to perform serially or in parallel the transforming the second asset data and transforming the third asset data into a third format of the third asset data.
16 . The non-transitory computer readable medium of claim 15 , wherein the operations further comprise:
generating, using the at least one processor, a second action script in response to the receiving the first asset data, the second action script indicating the action to be executed to respond to the first cyber-security risk associated with the first asset.
17 . The non-transitory computer readable medium of claim 15 , wherein:
the first cyber-security risk includes a new device establishing a connection with the first asset; and
the second asset data indicates quarantining of, or registration of, the new device, the quarantining or the registration occurring after the new device is determined to be unauthorized or authorized, respectively.
18 . The non-transitory computer readable medium of claim 17 , wherein the first action script causes the monitoring system to update the status of the new device as a new asset of the networked system when the transformed second asset data indicates the registration of the new device.
19 . The non-transitory computer readable medium of claim 15 , wherein:
the first cyber-security risk includes an increased data transmission by the first asset; and
the second asset data indicates quarantining of the first asset, the quarantining occurring after the first asset is determined to be compromised.
20 . The non-transitory computer readable medium of claim 15 , wherein the first asset is an Internet-of-Things sensor, a medical alert system, or a third-party integration device.