IP Library › Granted Patent US 11,115,439
Granted Patent B2
US 11,115,439 · App. 16/275,953 · Granted Sep 7, 2021

Automated security solutions identification and architecture design

Inventors: Ebrahim Tarameshloo (Toronto, CA); Amin Hassanzadeh (Arlington, VA)
Assignee: ACCENTURE GLOBAL SOLUTIONS LIMITED
H04L63/20G06N20/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,115,439
App. No.
16/275,953
Granted
Sep 7, 2021
Kind
B2
Abstract

Systems, apparatuses, and methods directed to security enhancement. One or more remote data sources may be accessed to retrieve remote data associated with security for a computing architecture. An input model of an input network security architecture may be identified. One or more user-based constraints may be identified. An output model may be automatically generated based on the input model, the remote data and the one or more user-based constraints. The output model is an output network security architecture that complies with the one or more user-based constraints.

Claims (43)

1. A security design system, comprising:

an interface to access one or more remote data sources to retrieve remote data associated with security for a computing architecture; and

a processor communicatively coupled to the interface, wherein the processor is configured to:

identify an input model of an input network security architecture;

identify one or more user-based constraints;

automatically generate an output model based on the input model, the remote data and the one or more user-based constraints, wherein the output model represents an output network security architecture that complies with at least one of the one or more user-based constraints;

compare the input model and the one or more user-based constraints to previous network security architecture models and previous user-based constraints associated with the previous network security architecture models to identify one or more similar network security architecture models from the previous network security architecture models that are similar to the input model; and

automatically generate the output model based on the one or more similar network security architecture models.

2. The system of claim 1 , wherein the processor is configured to generate a plurality of different output models based on the input model, the remote data and the one or more user-based constraints, wherein each of the plurality of different output models represents an output network security architecture that complies with at least one of the one or more user-based constraints.

3. The system of claim 1 , wherein the one or more user-based constraints is to include one or more of a cost constraint, a time constraint, a security based constraint or a goal constraint.

4. The system of claim 1 , wherein the remote data is to include one or more of hardware specifications, costs of security implementations, time for security implementations, network threat data or webpage data.

5. The system of claim 1 , wherein the input model and the output model are each a directed graph.

6. The system of claim 1 , wherein the processor is configured to:

receive an input data structure that corresponds to the input network security architecture;

conduct an automated analysis of the input network security architecture to identify one or more missing elements that are part of the input network security architecture and missing from the input data structure; and

generate the input model from the input data structure and the automated analysis.

7. A method, comprising:

accessing one or more remote data sources to retrieve remote data associated with security for a computing architecture;

identifying an input model of an input network security architecture;

identifying one or more user-based constraints;

automatically generating an output model based on the input model, the remote data and the one or more user-based constraints, wherein the output model represents an output network security architecture that complies with at least one of the one or more user-based constraints;

comparing the input model and the one or more user-based constraints to previous network security architecture models and previous user-based constraints associated with the previous network security architecture models;

based on the comparing, identifying one or more similar network security architecture models from the previous network security architecture models that are similar to the input model; and

automatically generating the output model based on the one or more similar network security architecture models.

8. The method of claim 7 , further comprising generating a plurality of different output models based on the input model, the remote data and the one or more user-based constraints, wherein each of the plurality of different output models represents an output network security architecture that complies with at least one of the one or more user-based constraints.

9. The method of claim 7 , wherein the one or more user-based constraints includes one or more of a cost constraint, a time constraint, a security based constraint or a goal constraint.

10. The method of claim 7 , wherein the remote data includes one or more of hardware specifications, costs of security implementations, time for security implementations, network threat data or webpage data.

11. The method of claim 7 , wherein the input model and the output model are each a directed graph.

12. A non-transitory computer readable medium comprising a set of instructions, which when executed by one or more processors of an authentication device, cause the one or more processors to:

retrieve remote data associated with security for a computing architecture;

identify an input model of an input network security architecture;

identify one or more user-based constraints;

automatically generate an output model based on the input model, the remote data and the one or more user-based constraints, wherein the output model represents an output network security architecture that complies with at least one of the one or more user-based constraints;

compare the input model and the one or more user-based constraints to previous network security architecture models and previous user-based constraints associated with the previous network security architecture models to identify one or more similar network security architecture models from the previous network security architecture models that are similar to the input model; and

automatically generate the output model based on the one or more similar network security architecture models.

13. The non-transitory computer readable medium of claim 12 , wherein the one or more processors are to generate a plurality of different output models based on the input model, the remote data and the one or more user-based constraints, wherein each of the plurality of different output models represents an output network security architecture that complies with at least one of the one or more user-based constraints.

14. The non-transitory computer readable medium of claim 12 , wherein the one or more user-based constraints is to include one or more of a cost constraint, a time constraint, a security based constraint or a goal constraint.

15. The non-transitory computer readable medium of claim 12 , wherein the remote data is to include one or more of hardware specifications, costs of security implementations, time for security implementations, network threat data or webpage data.

16. The non-transitory computer readable medium of claim 12 , wherein the input model and the output model are each a directed graph.

17. The non-transitory computer readable medium of claim 12 , wherein the one or more processors are to:

receive an input data structure that corresponds to the input network security architecture;

conduct an automated analysis of the input network security architecture to identify one or more missing elements that are part of the input network security architecture and missing from the input data structure; and

generate the input model from the input data structure and the automated analysis.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 14, 2019
From: TARAMESHLOO, EBRAHIM; HASSANZADEH, AMIN
To: ACCENTURE GLOBAL SOLUTIONS LIMITED
Reel/Frame 048338/0143 →
Continuity (1)
Related Publication 20200267186A1 · Aug 20, 2020