Granted Patent B2

US 12,401,692 · App. 18/304,777 · Granted Aug 26, 2025

Inventors: Stav Sapir (Beer Sheba, IL); Maxim Balin (Gan-Yavne, IL)

Assignee: Dell Products L.P.

H04L63/20

Abstract

Claims (59)

1. A method for managing computing infrastructure, the method comprising:

obtaining a compliance information element for an infrastructure component of the computing infrastructure;

dynamically processing the compliance information element to update a cross-standard compliance coverage model to obtain an updated cross-standard compliance coverage model;

obtaining, using the updated cross-standard compliance coverage model, standard compliance data for a security standard enforced on the infrastructure;

obtaining a likelihood estimate for the infrastructure component using the standard compliance data;

obtaining, using the likelihood estimate, confidentiality-integrity-availability classifications for the infrastructure, and a rating system, a confidentiality-integrity-availability rating for the infrastructure component;

making a determination, using the confidentiality-integrity-availability rating, regarding whether the infrastructure has undergone a change in compliance with the security standard; and

in an instance of the determination where the infrastructure has undergone a change in compliance with the security standard:

performing an action set to manage an impact of the change in compliance with the security standard.

2. The method of claim 1 , wherein using the confidentiality-integrity-availability rating to make the determination comprises:

presenting, using the confidentiality-integrity-availability rating, a dashboard;

obtaining, using the dashboard, user input responsive to the confidentiality-integrity-availability rating; and

using the user input to make the determination.

3. The method of claim 2 , wherein the confidentiality-integrity-availability classifications comprise a first classification for confidentiality, the first classification indicating a numerical value within a range for confidentiality concern for the infrastructure component.

4. The method of claim 3 , wherein obtaining the confidentiality-integrity-availability rating comprises:

obtaining a quantification using the numerical value and the likelihood estimate.

5. The method of claim 4 , wherein obtaining the confidentiality-integrity-availability rating further comprises:

obtaining a second quantification using a second numerical value and the likelihood estimate, the second numerical value being within a range for integrity concern for the infrastructure component.

6. The method of claim 1 , wherein the confidentiality-integrity-availability rating comprises three sub-ratings, the sub-ratings being for confidentiality concern, integrity concern, and availability concern for the infrastructure component, respectively.

7. The method of claim 6 , wherein each of the three sub-ratings are set by a manager of the infrastructure component.

8. The method of claim 1 , wherein the likelihood is a likelihood of the infrastructure component becoming compromised.

9. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing computing infrastructure, the operations comprising:

obtaining a compliance information element for an infrastructure component of the computing infrastructure;

dynamically processing the compliance information element to update a cross-standard compliance coverage model to obtain an updated cross-standard compliance coverage model;

obtaining, using the updated cross-standard compliance coverage model, standard compliance data for a security standard enforced on the infrastructure;

obtaining a likelihood estimate for the infrastructure component using the standard compliance data;

obtaining, using the likelihood estimate, confidentiality-integrity-availability classifications for the infrastructure, and a rating system, a confidentiality-integrity-availability rating for the infrastructure component;

making a determination, using the confidentiality-integrity-availability rating, regarding whether the infrastructure has undergone a change in compliance with the security standard; and

in an instance of the determination where the infrastructure has undergone a change in compliance with the security standard:

performing an action set to manage an impact of the change in compliance with the security standard.

10. The non-transitory machine-readable medium of claim 9 , wherein using the confidentiality-integrity-availability rating to make the determination comprises:

presenting, using the confidentiality-integrity-availability rating, a dashboard;

obtaining, using the dashboard, user input responsive to the confidentiality-integrity-availability rating; and

using the user input to make the determination.

11. The non-transitory machine-readable medium of claim 10 , wherein the confidentiality-integrity-availability classifications comprise a first classification for confidentiality, the first classification indicating a numerical value within a range for confidentiality concern for the infrastructure component.

12. The non-transitory machine-readable medium of claim 11 , wherein obtaining the confidentiality-integrity-availability rating comprises:

obtaining a quantification using the numerical value and the likelihood estimate.

13. The non-transitory machine-readable medium of claim 12 , wherein obtaining the confidentiality-integrity-availability rating further comprises:

obtaining a second quantification using a second numerical value and the likelihood estimate, the second numerical value being within a range for integrity concern for the infrastructure component.

14. The non-transitory machine-readable medium of claim 9 , wherein the confidentiality-integrity-availability rating comprises three sub-ratings, the sub-ratings being for confidentiality concern, integrity concern, and availability concern for the infrastructure component, respectively.

15. The non-transitory machine-readable medium of claim 14 , wherein each of the three sub-ratings are set by a manager of the infrastructure component.

16. The non-transitory machine-readable medium of claim 9 , wherein the likelihood is a likelihood of the infrastructure component becoming compromised.

17. A data processing system, comprising:

a processor; and

a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing computing infrastructure, the operations comprising:

obtaining a compliance information element for an infrastructure component of the computing infrastructure;

dynamically processing the compliance information element to update a cross-standard compliance coverage model to obtain an updated cross-standard compliance coverage model;

obtaining, using the updated cross-standard compliance coverage model, standard compliance data for a security standard enforced on the infrastructure;

obtaining a likelihood estimate for the infrastructure component using the standard compliance data;

obtaining, using the likelihood estimate, confidentiality-integrity-availability classifications for the infrastructure, and a rating system, a confidentiality-integrity-availability rating for the infrastructure component;

making a determination, using the confidentiality-integrity-availability rating, regarding whether the infrastructure has undergone a change in compliance with the security standard; and

in an instance of the determination where the infrastructure has undergone a change in compliance with the security standard:

performing an action set to manage an impact of the change in compliance with the security standard.

18. The data processing system of claim 17 , wherein using the confidentiality-integrity-availability rating to make the determination comprises:

presenting, using the confidentiality-integrity-availability rating, a dashboard;

obtaining, using the dashboard, user input responsive to the confidentiality-integrity-availability rating; and

using the user input to make the determination.

19. The data processing system of claim 18 , wherein the confidentiality-integrity-availability classifications comprise a first classification for confidentiality, the first classification indicating a numerical value within a range for confidentiality concern for the infrastructure component.

20. The data processing system of claim 17 , wherein the likelihood is a likelihood of the infrastructure component becoming compromised.

Assignments (1)

Continuity (1)

References Cited (54)