公开(公告)号：US20150222765A9

公开(公告)日：2015-08-06

申请号：US13836240

申请日：2013-03-15

申请人： Rami Kawach ,  Terry K. Cook ,  Roger W. Sprague, JR. ,  Patrick J. Stratton

发明人： Rami Kawach ,  Terry K. Cook ,  Roger W. Sprague, JR. ,  Patrick J. Stratton

IPC分类号： H04N1/00 ,  H04N1/21

CPC分类号： H04N1/00244 ,  H04N1/21

摘要： The presently described embodiments relate to a novel system and method to collect state as a snapshot from a potentially transient endpoint and transmit the state to a public or private network for storage and processing. This system and method allows for the synchronization and virtualization of the endpoint state image in the network for purposes of processing, analysis, and reporting, including but not limited to endpoint vulnerability auditing.

摘要翻译： 目前描述的实施例涉及一种从潜在的瞬时端点收集状态作为快照并将状态发送到公共或专用网络进行存储和处理的新型系统和方法。 该系统和方法允许网络中的端点状态映像的同步和虚拟化，用于处理，分析和报告，包括但不限于端点漏洞审计。

公开(公告)号：US08490188B2

公开(公告)日：2013-07-16

申请号：US12580982

申请日：2009-10-16

申请人： Wolfgang Kandek ,  Holger Kruse ,  Tigran Gevorgyan ,  Gregor Glawitsch ,  Parminder Singh ,  Kenneth K. Okumura

发明人： Wolfgang Kandek ,  Holger Kruse ,  Tigran Gevorgyan ,  Gregor Glawitsch ,  Parminder Singh ,  Kenneth K. Okumura

IPC分类号： G06F11/00

CPC分类号： G06F21/577 ,  G06F2221/034 ,  H04L63/1408 ,  H04L63/1433 ,  H04L63/166 ,  H04L63/20

摘要： The disclosed principles describe systems and methods for assessing the security posture of a target device, wherein the assessment is performed by a scanning computer in communication with the target device via a communication network. By employing a system or method in accordance with the disclosed principles, distinct advantages are achieved. Specifically, conducting such a remote scan allows for the scanner computer to perform a remote scan of the remote device without installing client software to the remote device. Thus, the disclosed principles reduce the need for internal IT resources to manage the deployment and updates of client software on the target device. Also, conducting a remote scan according to the disclosed principles allows for the remote scan to be performed even if the scanner computer and remote device run different operating systems.

摘要翻译： 所公开的原理描述了用于评估目标设备的安全状态的系统和方法，其中所述评估由通过通信网络与目标设备通信的扫描计算机执行。 通过采用根据公开的原理的系统或方法，实现了明显的优点。 具体来说，执行这样的远程扫描允许扫描仪计算机执行远程设备的远程扫描，而无需将客户端软件安装到远程设备。 因此，所公开的原理减少了对内部IT资源的需求，以管理目标设备上的客户端软件的部署和更新。 此外，根据所公开的原理执行远程扫描，即使扫描仪计算机和远程设备运行不同的操作系统也允许执行远程扫描。

公开(公告)号：US20120233700A1

公开(公告)日：2012-09-13

申请号：US13482531

申请日：2012-05-29

申请人： Wissam Ali-Ahmad ,  Wolfgang Kandek ,  Holger Kruse ,  Vikas Dewan ,  KD Mazboudi ,  Ganesh Jampani ,  Kenneth K. Okumura

发明人： Wissam Ali-Ahmad ,  Wolfgang Kandek ,  Holger Kruse ,  Vikas Dewan ,  KD Mazboudi ,  Ganesh Jampani ,  Kenneth K. Okumura

IPC分类号： G06F21/00

CPC分类号： H04L63/1433 ,  G06F3/048 ,  G06F2221/2101 ,  G06F2221/2119 ,  H04L63/0281 ,  H04L63/1408 ,  H04L63/1441 ,  H04L63/166 ,  H04L67/02

摘要： Methods and systems for scanning an endpoint terminal across an open computer network are disclosed. An exemplary method includes providing a scanner engine in a computer server in communication with an open computer network, and establishing a secure connection across the open computer network between the scanner engine and a scanner agent installed on the endpoint terminal in communication with the open computer network. Commands for collecting data regarding the endpoint terminal are sent from the scanner engine across the secure connection to the scanner agent. The scanner engine then receives the collected data from the scanner agent across the secure connection, analyzes the data to assess a current posture of the endpoint terminal, and determines any updates for the endpoint terminal from the analysis. Updates are sent across the secure connection to the scanner agent for installation on the endpoint terminal, and the secure connection may then be terminated.

摘要翻译： 公开了用于扫描开放式计算机网络上的端点终端的方法和系统。 示例性方法包括在与开放式计算机网络通信的计算机服务器中提供扫描仪引擎，以及在扫描仪引擎与安装在端点终端上与开放式计算机网络通信的扫描器代理之间的开放式计算机网络上建立安全连接 。 用于收集关于端点终端的数据的命令从扫描仪引擎通过安全连接发送到扫描器代理。 然后，扫描仪引擎通过安全连接从扫描器代理接收收集的数据，分析数据以评估端点终端的当前状态，并根据分析确定端点终端的任何更新。 更新将通过安全连接发送到扫描仪代理，以安装在端点终端上，然后可以终止安全连接。

公开(公告)号：US20100175134A1

公开(公告)日：2010-07-08

申请号：US12541869

申请日：2009-08-14

申请人： Wissam Ali-Ahmad ,  Wolfgang Kandek ,  Holger Kruse ,  Vikas Dewan ,  Kd Mazboudi ,  Ganesh Jampani ,  Kenneth K. Okumura

发明人： Wissam Ali-Ahmad ,  Wolfgang Kandek ,  Holger Kruse ,  Vikas Dewan ,  Kd Mazboudi ,  Ganesh Jampani ,  Kenneth K. Okumura

IPC分类号： G06F11/00

CPC分类号： H04L63/1433 ,  G06F3/048 ,  G06F2221/2101 ,  G06F2221/2119 ,  H04L63/0281 ,  H04L63/1408 ,  H04L63/1441 ,  H04L63/166 ,  H04L67/02

摘要： Methods and systems for scanning an endpoint terminal across an open computer network are disclosed. An exemplary method includes providing a scanner engine in a computer server in communication with an open computer network, and establishing a secure connection across the open computer network between the scanner engine and a scanner agent installed on the endpoint terminal in communication with the open computer network. Commands for collecting data regarding the endpoint terminal are sent from the scanner engine across the secure connection to the scanner agent. The scanner engine then receives the collected data from the scanner agent across the secure connection, analyzes the data to assess a current posture of the endpoint terminal, and determines any updates for the endpoint terminal from the analysis. Updates are sent across the secure connection to the scanner agent for installation on the endpoint terminal, and the secure connection may then be terminated.

摘要翻译： 公开了用于扫描开放式计算机网络上的端点终端的方法和系统。 示例性方法包括在与开放式计算机网络通信的计算机服务器中提供扫描仪引擎，以及在扫描仪引擎与安装在端点终端上与开放式计算机网络通信的扫描器代理之间的开放式计算机网络上建立安全连接 。 用于收集关于端点终端的数据的命令从扫描仪引擎通过安全连接发送到扫描器代理。 然后，扫描仪引擎通过安全连接从扫描器代理接收收集的数据，分析数据以评估端点终端的当前状态，并根据分析确定端点终端的任何更新。 更新将通过安全连接发送到扫描仪代理，以安装在端点终端上，然后可以终止安全连接。

公开(公告)号：US20100175106A1

公开(公告)日：2010-07-08

申请号：US12635673

申请日：2009-12-10

申请人： Sebastien Diebler ,  Bharat Patel ,  Wolfgang Kandek ,  Holger Kruse ,  Amol Sarwate ,  Thomas Sola

发明人： Sebastien Diebler ,  Bharat Patel ,  Wolfgang Kandek ,  Holger Kruse ,  Amol Sarwate ,  Thomas Sola

IPC分类号： G06F21/00 ,  H04L9/32

CPC分类号： H04L67/125 ,  G06F21/577

摘要： The disclosed principles describe systems and methods for assessing the policy compliance of a target device, wherein the assessment is performed by a scanning computer in communication with the target device via a communication network. By employing a system or method in accordance with the disclosed principles, distinct advantages are achieved. Specifically, conducting such a remote scan allows for the scanner computer to perform a remote scan of the remote device without installing client software to the remote device. Also, conducting a compliance assessment according to the disclosed principles allows for the target device to be assessed after policy updates and changes, without requiring the target device to be re-scanned. Thus, the disclosed principles reduce the need for internal IT resources to manage the assessment and updates of client configuration settings on the target device.

摘要翻译： 所公开的原理描述了用于评估目标设备的策略符合性的系统和方法，其中所述评估由通过通信网络与目标设备通信的扫描计算机执行。 通过采用根据公开的原理的系统或方法，实现了明显的优点。 具体来说，执行这样的远程扫描允许扫描仪计算机执行远程设备的远程扫描，而无需将客户端软件安装到远程设备。 此外，根据所公开的原理执行合规性评估允许在策略更新和更改之后评估目标设备，而不需要重新扫描目标设备。 因此，所公开的原则减少了对内部IT资源的需求，以管理目标设备上的客户端配置设置的评估和更新。