Patent ID: 7590745
Filing Date: 2009-09-15
Classification: H04L

Abstract:
1. A system for detecting security risks in a shared network system shared by different entity networks, said system comprising: a central processing unit, a memory and a computer readable storage; first program instructions to retrieve, from a router for said shared network system, flow tables that identify source and destination networks for which intercommunication is permitted, security policies indicating that at least one of said entity networks is not permitted to communicate with another of said entity networks, filter files that identify at least one of said entity networks which is permitted to use another of said entity networks to access web applications outside of said shared network system, and maps of respective entity networks of said shared network system; second program instructions to generate a shared network map of said shared network system, based at least in part on said maps of said respective entity networks, said shared network map including said different entity networks; third program instructions to identify a set of permitted communications through said router based on said flow tables and filter files; and fourth program instructions to identify a permitted communication of said set which represents a security risk based on said shared network map and said security policies; and wherein said first, second, third and fourth program instructions are stored in said computer readable storage for execution by said central processing unit via said memory.