Patent ID: 9652618
Date: 2017-05-16
CPC Classifications: G06F,G06N,G06Q

Claim:
1. A method for asset architecture evaluation and security enforcement within an enterprise computing platform, the method comprising: causing transmission, by a component scanner, of one or more change identification messages to a component agent residing on an asset that was previously evaluated by a security engine; receiving an indication that there have been changes to a current architecture of the asset; generating a proposed architecture for evaluation, wherein the proposed architecture for evaluation indicates a design including both the enterprise computing platform and a modified version of the architecture of the asset that is based on the changes to the current architecture of the asset; dynamically evaluating, by risk evaluation circuitry and in near-real-time using one or more machine learning algorithms, the proposed architecture against embedded security policies, standards, baselines, or patterns established for the enterprise computing platform; in an instance in which dynamic evaluation of the proposed architecture identifies security gaps, determining, by the risk evaluation circuitry, changes to the proposed architecture that would remediate the identified security gaps; generating a report regarding the proposed architecture, wherein the report identifies any changes to the proposed architecture that would remediate the identified security gaps; and causing transmission, by the component scanner and to the component agent residing on the asset, of the report regarding the proposed architecture.