US6415321B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Domain mapping method and system
Assignee: Cisco Technology Inc
•
Filing: 1998-12-29
•
Granted: 2002-07-02
•
Expires: 2018-12-29
Abstract
Abstract A method and system for mapping a network domain provides a centralized repository for network information to support network devices, including an intrusion detection system. A domain mapping device includes an acquisition engine for acquiring network information, hypercube storage for storing network information, and a query engine for responding to queries from network devices for network information. The acquisition engine acquires network information by active scanning of network devices, passive scanning of network devices, polling of network devices, or receiving network information pushed from network devices. The network information includes device type, operating system, service and vulnerability information. The query engine provides network information in response to queries from network devices, such as intrusion detection devices that use the data to detect attacks on the vulnerabilities of the network.
Inventors
- 👤 Robert E. Gleichauf
- 👤 Gerald S Lathem
- 👤 Scott V. Waddell
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 14:56
CPC Classifications
H; H04; H04L; H04L41/00; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; H04L63/14; H04L63/1433
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
104 words
A system for mapping a network domain, the system comprising: plural network devices interfaced with the network, each network device having network information; and a domain mapping device interfaced with the network, the domain mapping device operable to: receive and store the network information from one or more network devices, provide the network information to an intrusion detection system upon receiving a query, analyze the stored network information, generate a network map based on the analysis and the stored network information, determine a potential vulnerability based on the analysis, and configure the intrusion detection system based on the network map and the potential vulnerability.
Claim 2
Independent Claim
104 words
A system for mapping a network domain, the system comprising: plural network devices interfaced with the network, each network device having network information; and a domain mapping device interfaced with the network, the domain mapping device operable to: receive and store the network information from one or more network devices, provide the network information to an intrusion detection system upon receiving a query, analyze the stored network information, generate a network map based on the analysis and the stored network information, determine a potential vulnerability based on the analysis, and configure the intrusion detection system based on the network map and the potential vulnerability.
Claim 3
Dependent Claim
20 words
The system of claim 1 wherein the domain mapping device further comprises an acquisition engine operable to acquire network information.
Claim 4
Dependent Claim
25 words
The system of claim 2 wherein the acquisition engine acquires network information with active capture of the network information from one or more network devices.
Claim 5
Dependent Claim
25 words
The system of claim 2 wherein the acquisition engine acquires network information with passive capture of the network information from one or more network devices.
Claim 6
Dependent Claim
27 words
The system of claim 2 wherein the acquisition engine polls the one or more network devices to acquire network information from the one or more network devices.
Claim 7
Dependent Claim
19 words
The system of claim 2 wherein the acquisition engine receives network information pushed from one or more network devices.
Claim 8
Dependent Claim
18 words
The system of claim 1 wherein the network information comprises vulnerabilities of the one or more network devices.
Claim 9
Dependent Claim
25 words
The system of claim 7 wherein the network information further comprises device type, services and operating system information of the one or more network devices.
Claim 10
Dependent Claim
19 words
The system of claim 1 wherein the domain mapping device further comprises hypercube storage operable to store network information.
Claim 11
Dependent Claim
29 words
The system of claim 1 wherein the domain mapping device further comprises a query engine operable to respond to queries from one or more network devices for network information.
Claim 12
Independent Claim
88 words
A method for mapping a network domain comprising the steps of: acquiring network information for one or more network devices associated with the network domain; storing the network information; interfacing the stored network information with the network; querying the stored network information with an intrusion detection system; analyzing the stored network information; generating a network map based on the analysis and the stored network information; determining a potential vulnerability based on the analysis; and configuring the intrusion detection system based on the network map and the potential vulnerability.
Claim 13
Independent Claim
88 words
A method for mapping a network domain comprising the steps of: acquiring network information for one or more network devices associated with the network domain; storing the network information; interfacing the stored network information with the network; querying the stored network information with an intrusion detection system; analyzing the stored network information; generating a network map based on the analysis and the stored network information; determining a potential vulnerability based on the analysis; and configuring the intrusion detection system based on the network map and the potential vulnerability.
Claim 14
Dependent Claim
23 words
The method of claim 11 wherein the acquiring step comprises active capture of network information from one or more of the network devices.
Claim 15
Dependent Claim
23 words
The method of claim 11 wherein the acquiring step comprises passive capture of network information from one or more of the network devices.
Claim 16
Dependent Claim
16 words
The method of claim 11 wherein the acquiring step comprises polling network devices for network information.
Claim 17
Dependent Claim
25 words
The method of claim 11 wherein the acquiring step comprises pushing network information from one or more network devices for storage on a centralized repository.
Claim 18
Dependent Claim
25 words
The method of claim 11 wherein the network information comprises identification of one or more services associated with one or more of the network devices.
Claim 19
Dependent Claim
26 words
The method of claim 11 wherein the network information comprises identification of one or more operating systems associated with one or more of the network devices.
Claim 20
Dependent Claim
21 words
The method of claim 11 wherein the network information comprises identification of the device type of one or more network devices.
Claim 21
Dependent Claim
19 words
The method of claim 11 wherein the network information comprises vulnerabilities of one or more of the network devices.
Claim 22
Dependent Claim
17 words
The method according to claim 11 wherein the storing step comprises hypercube storage of the network information.
References Cited (Backward Citations)
US5101402A
Cited
US5032979A
Cited
US5278901A
Cited
US5621889A
Cited
US5448724A
Cited
US5414833A
Cited
US5606668A
Cited
US5557742A
Cited
US5524238A
Cited
US5488715A
Cited
US5699513A
Cited
US5793763A
Cited
US5796951A
Cited
US5826014A
Cited
US5931946A
Cited
US5798706A
Cited
US5991881A
Cited
US5796942A
Cited
US5805801A
Cited
US5919257A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-07-01 | 2005-12-31 | 2006-07-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-07-01 | 2009-12-31 | 2010-07-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-07-01 | 2013-12-31 | 2014-07-02 | $7700.00 | Window Closed / Lapsed |