Patent ID: 9032520
Filing Date: 2015-05-12
Classification: G06F,H04L

Abstract:
1. A system for security self-assessment of a computer platform, comprising: a memory; a processor; an application stored in the memory that, when executed by the processor, in association with a call to action, transmits security self-assessment logic and at least one security self-assessment policy to a computer platform of a personal computer device, wherein the security self-assessment policy defines at least one scan tool of a plurality of scan tools to be used by the security self-assessment logic when executed on the computer platform to perform a security self-assessment of the computer platform, and wherein the at least one scan tool comprises at least one of an anti-malware engine, registry check tool, file check tool, system level analysis tool, window management inquiry tool, or a vulnerability assessment engine and a data discovery engine including at least one of a primary account number scan tool that detects credit card numbers stored on the computer platform or a social security number scan tool that detects social security numbers stored on the computer platform, receives results from the computer platform when the computer platform executes the security self-assessment logic, analyzes the results to determine confidential information on the computer platform and a security vulnerability of the computer platform, generates a report based on the confidential information and the security vulnerability of the computer platform, and sends the report to one or more stakeholders; and the plurality of scan tools stored in the memory and accessible for downloading by security self-assessment logic when executed on the computer platform, wherein the security self-assessment logic is configured to cause a processor of the computer platform to download to the computer platform the at least one scan tool defined by the security self-assessment policy from the plurality of scan tools stored in the memory, to perform the security self-assessment of the computer platform based at least in part on the downloaded at least one scan tool in response to a request from the personal computer device to connect to a private network, to remove the at least one downloaded scan tool from the computer platform, to remove the security self-assessment policy from the computer platform, and to remove the security self-assessment logic from the computer platform when the security self-assessment of the computer platform has performed, and wherein at least one action is taken in response to the computer platform failing the security self-assessment, the at least one action comprising at least one of invalidating or removing one or more security tokens, refusing access to an application on the private network, refusing access to the private network, adding the personal computer device to a blacklist of a firewall, or providing instructions to the personal computer device on how to correct a security vulnerability of the computer platform.