Patent ID: 8225409
Filing Date: 2012-07-17
Classification: G06F,H04L

Abstract:
1. A security control verification and monitoring subsystem for use with a managed computer system, the security control verification and monitoring subsystem including: A. a security control manager for assigning respective security risk categories to groups of computers, consisting of two or more computers, for all computers in the managed computer system, associating benchmark security levels with the risk categories for: respective groups of computers; directing a computer within a given group as to the benchmark security level the computer should use for security compliance testing; B. client profilers associated with respective computers in a group of computers, the client profilers periodically uploading the computer profile data to an associated computer information database, and C. a security verifier associated with a given computer in a given group for retrieving benchmark definition files that correspond to the benchmark security level specified by the security control manager and selected attributes of the computer that are based upon the computer profile data of the computers that are contained within the database, the security verifier automatically changing which benchmark definition files are retrieved to correspond to changes in the selected attributes of the computer without user modification of benchmark tests and settings per computer; performing a security verification operation using the retrieved benchmark definition files periodically, and reporting the results of the security control verification operation to the security control manager.