Patent ID: 8584194
Filing Date: 2013-11-12
Classification: H04L

Abstract:
1. A method for minimizing security risks presented by adding a new node to a network, comprising: capturing a first request to obtain a network address for a network from a candidate node at a validation module of a quarantined server; transmitting a quarantined network address for a virtual network to the candidate node to enable the candidate node to communicate with only resources within the virtual network, wherein transmitting the quarantined network address to the candidate node occurs after the first request to obtain the network address has been captured; admitting the candidate node to the virtual network, wherein the candidate node is admitted to the virtual network before any determination is made whether the candidate node satisfies a set of security criteria from a remediation module of the quarantined server; determining whether the candidate node satisfies the set of security criteria from the remediation module of the quarantined server, wherein determining whether the candidate node satisfies the set of security criteria occurs after the quarantined network address has been transmitted to the candidate node and is based upon the first request, wherein determining comprises sending a script from the quarantined server to the quarantined network address after the quarantined network address has been sent to the candidate node, wherein the script scans the candidate node to determine whether the candidate node uses an updated version of anti-virus software and an updated version of an operating system; receiving an authorization message at the validation module if the candidate node satisfies the set of security criteria; transmitting a relayed request for a network address from the validation module to a network address server, transmitting a network address from the network address server to the candidate node when the candidate node does satisfy the set of security criteria, wherein the transmitted network address is transmitted directly to the candidate node and does not pass through the validation module of the quarantined server.