Patent ID: 8336080
Filing Date: 2012-12-18
Classification: H04L,H04W

Abstract:
1. A method, comprising: at a control server: storing one security rating template for each particular Settings Class of a plurality of different Settings Classes for a first wireless computing device, wherein each security rating template comprises information specified by a security expert for determining an expected security rating for any Settings Objects created in accordance with a particular Settings Class; generating, based on Values input by a user for a plurality of Configurable Attributes, a first Settings Object for a first particular Settings Class, wherein the first Settings Object defines a particular configuration of a first subsystem of the first wireless computing device, and a plurality of other Settings Objects for Settings Classes of the plurality of different Settings Classes, wherein each of the other Settings Objects correspond to one of the Settings Classes and define particular configurations of subsystems of the first wireless computing device; using a particular security rating template corresponding to the first particular Settings Class to generate a first expected security rating corresponding to the first Settings Object, and for each of the other Settings Objects, using a particular security rating template corresponding to a particular Settings Class to generate expected security ratings corresponding to each of the other Settings Objects; evaluating, by a security expert, a particular group of Settings Objects generated by the user for the first wireless computing device and the corresponding Security Rating Templates for each one of the particular group of Settings Objects, to determine the security inter-relationships between the configurations of subsystems defined by the Settings Objects in the particular group of Settings Objects; creating, based on the evaluation of the security expert, a security interaction template (SIT) and security test scripts that correspond to the particular group of Settings Objects, wherein the SIT describes how to produce a first expected overall device security rating (ODSR) for the particular group of Settings Objects; generating, based on the security interaction template and security rating templates, a first expected ODSR that represents an aggregate security expected of the first wireless computing device if the particular group of Settings Objects are actually deployed and applied as a group to the first wireless computing device, taking into account individual security ratings of the Settings Objects applied and interactions between the Settings Objects applied; and generating, based on the security test scripts, a set of overall security test cases that are to be run on subsystems of the first wireless computing device to measure an actual aggregate security of the first wireless computing device under conditions when the particular group of Settings Objects are actually deployed and applied as a group to the first wireless computing device.